CVE-2017-0359: Debian Linux

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.

Affected products

• Debian Debian Linux: version 9.0 only
• Reproducible Builds Diffoscope: before 77 (fixed in 77)

Published 2018-04-13. Last modified 2026-06-17.