What’s Vulnerable › Vulnerabilities

CVE-2015-1378

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-07 · updated 2026-06-17
• Weakness: CWE-264

Description

cmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is sourced without checking that the local directory is writable by non-root users.

Affected products

• Grml-Debootstrap: 0.54, 0.68, 0.70, 0.71, 0.72, 0.73 (+4)

References

• http://cve.killedkenny.io/cve/CVE-2015-1378
• http://www.openwall.com/lists/oss-security/2015/01/27/17
• https://github.com/grml/grml-debootstrap/issues/59
• https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1378.html
• https://security-tracker.debian.org/tracker/CVE-2015-1378/
• http://cve.killedkenny.io/cve/CVE-2015-1378
• http://www.openwall.com/lists/oss-security/2015/01/27/17
• https://github.com/grml/grml-debootstrap/issues/59
• https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1378.html
• https://security-tracker.debian.org/tracker/CVE-2015-1378/

Get alerted when CVE-2015-1378 or the next vulnerability affects your stack