CVE-2014-8625

CVE-2014-8625 describes multiple format string vulnerabilities in the parse_error_msg function of dpkg versions prior to 1.17.22, affecting Debian systems. These flaws allow remote attackers to trigger a denial of service or potentially execute arbitrary code by injecting format string specifiers into package or architecture names. With a CVSS score of 6.8 (medium severity), it presents a network-based attack vector with medium complexity, potentially leading to partial confidentiality, integrity, and availability impacts. While no active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB) is noted, there has been some community discussion and media coverage, indicating awareness of the vulnerability.