CVE catalog
CVE-2015-1378
grml-debootstrap: CVE-2015-1378
- Severity
- Medium
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.72% · Oct 25, 2026
cmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is sourced without checking that the local directory is writable by non-root users.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | grml-debootstrap | sid | 0.130 | fixed |
| Debian | grml-debootstrap | forky | 0.130 | fixed |
| Debian | grml-debootstrap | trixie | 0.121 | fixed |
| Debian | grml-debootstrap | bookworm | 0.103 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | grml-debootstrap | source | sid | 0.68.1 | low | Not reported | [776502] |
| Debian | grml-debootstrap | source | forky | 0.68.1 | low | Not reported | [776502] |
| Debian | grml-debootstrap | source | trixie | 0.68.1 | low | Not reported | [776502] |
| Debian | grml-debootstrap | source | bookworm | 0.68.1 | low | Not reported | [776502] |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [grml-debootstrap]Fixed
Details (2)
0.103· all · bookwormFixed · Fixed:
0.68.1dsa · grml-debootstrap · debian · bookworm; dsa · grml-debootstrap · debian · 12
0.103· all · bookwormFixed · Fixed:
0.68.1dsa · grml-debootstrap · debian · bookworm; dsa · grml-debootstrap · debian · 12
[Debian 13 (Trixie)]
- [grml-debootstrap]Fixed
Details (2)
0.121· all · trixieFixed · Fixed:
0.68.1dsa · grml-debootstrap · debian · 13
0.121· all · trixieFixed · Fixed:
0.68.1dsa · grml-debootstrap · debian · 13
Observed: