CVE-2025-6297
dpkg-deb: Fix cleanup for control member with restricted directories
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
dpkg-deb: Fix cleanup for control member with restricted directories
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.
- Record
CVE-2025-6297- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N - Weakness
- CWE-732, CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2025-19670
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.
- Record
EUVD-2025-19670- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-w56q-6jw5-h5xf
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting...
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.
- Record
GHSA-w56q-6jw5-h5xf- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.
- Record
CVE-2025-6297- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N - Weakness
- CWE-400, CWE-732
- Updated
- 2026-11-02
OSV
dpkg-deb: Fix cleanup for control member with restricted directories
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.
- Record
CVE-2025-6297- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-6297
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.
- Record
DEBIAN-CVE-2025-6297- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N - Updated
- 2026-11-02
Show 11 moreShow less
OSVUBUNTU-CVE-2025-6297
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.
- Record
UBUNTU-CVE-2025-6297- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N - Updated
- 2026-11-02
OSVAZL-64641 No score
CVE-2025-6297 affecting package dpkg 1.20.10-1
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.
- Record
AZL-64641- Updated
- 2026-11-02
OSVCLSA-2025-1760024944 No score
Fix CVE(s): CVE-2025-6297
- SECURITY UPDATE: Fix directory cleanup vulnerability
- dpkg-deb/info.c: Fix cleanup for control member with restricted directories
- Add treewalk to set proper permissions before removal for non-root users
- CVE-2025-6297
- Record
CLSA-2025-1760024944- Updated
- 2026-11-02
OSVCLSA-2025-1764321086 No score
Fix CVE(s): CVE-2025-6297
- SECURITY UPDATE: Directory permission cleanup vulnerability leading to DoS
- debian/patches/CVE-2025-6297.patch: Fix cleanup for control member with restricted directories
- CVE-2025-6297
- Record
CLSA-2025-1764321086- Updated
- 2026-11-02
OSVMGASA-2025-0204 No score
Updated dpkg packages fix security vulnerabilities
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.
- Record
MGASA-2025-0204- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15314-1 No score
dpkg-1.22.21-1.1 on GA media
These are all security issues fixed in the dpkg-1.22.21-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15314-1- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-6297 No score
CVE-2025-6297 in rootio-dpkg - Patched by Root
Root has patched CVE-2025-6297 in the rootio-dpkg package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2025-6297- Updated
- 2026-11-02
OSVSUSE-SU-2025:02734-1 No score
Security update for dpkg
This update for dpkg fixes the following issues:
- CVE-2025-6297: Fixed an improper sanitization of directory permissions that could lead to DoS. (bsc#1245573)
- Record
SUSE-SU-2025:02734-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20562-1 No score
Security update for dpkg
This update for dpkg fixes the following issues:
- CVE-2025-6297: Fixed improper sanitization of directory permissions leading to DoS via disk quota exhaustion due to files left behind on cleanup (bsc#1245573)
- Record
SUSE-SU-2025:20562-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20670-1 No score
Security update for dpkg
This update for dpkg fixes the following issues:
- CVE-2025-6297: Fixed cleanup for control member with restricted directories (bsc#1245573).
- Record
SUSE-SU-2025:20670-1- Updated
- 2026-11-02
OSVUSN-7768-1 No score
dpkg vulnerability
It was discovered that dpkg incorrectly handled removing certain temporary directories. An attacker could possibly use this issue to consume disk space, leading to a denial of service.
- Record
USN-7768-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dpkgAzure Linux:2 |
through 1.20.10-1 | None known |
dpkgTuxCare:Ubuntu:18.04 |
before 1.19.0.5ubuntu2.4+tuxcare.els1 | 1.19.0.5ubuntu2.4+tuxcare.els1 |
dpkg-devTuxCare:Ubuntu:18.04 |
before 1.19.0.5ubuntu2.4+tuxcare.els1 | 1.19.0.5ubuntu2.4+tuxcare.els1 |
dselectTuxCare:Ubuntu:18.04 |
before 1.19.0.5ubuntu2.4+tuxcare.els1 | 1.19.0.5ubuntu2.4+tuxcare.els1 |
libdpkg-devTuxCare:Ubuntu:18.04 |
before 1.19.0.5ubuntu2.4+tuxcare.els1 | 1.19.0.5ubuntu2.4+tuxcare.els1 |
libdpkg-perlTuxCare:Ubuntu:18.04 |
before 1.19.0.5ubuntu2.4+tuxcare.els1 | 1.19.0.5ubuntu2.4+tuxcare.els1 |
dpkgTuxCare:Debian:10 |
before 1.19.8+tuxcare.els1 | 1.19.8+tuxcare.els1 |
dpkg-devTuxCare:Debian:10 |
before 1.19.8+tuxcare.els1 | 1.19.8+tuxcare.els1 |
dselectTuxCare:Debian:10 |
before 1.19.8+tuxcare.els1 | 1.19.8+tuxcare.els1 |
libdpkg-devTuxCare:Debian:10 |
before 1.19.8+tuxcare.els1 | 1.19.8+tuxcare.els1 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libdpkg-perlTuxCare:Debian:10 |
before 1.19.8+tuxcare.els1 | 1.19.8+tuxcare.els1 |
dpkgDebian:12 |
before 1.21.23, plus listed versions 1.21.22 |
1.21.23 |
dpkgDebian:13 |
before 1.22.21 | 1.22.21 |
dpkgDebian:14 |
before 1.22.21 | 1.22.21 |
dpkgMageia:9 |
before 1.22.21-1.mga9 | 1.22.21-1.mga9 |
update-alternativesSUSE:Linux Enterprise Micro 5.3 |
before 1.19.0.4-150000.4.7.1 | 1.19.0.4-150000.4.7.1 |
update-alternativesSUSE:Linux Enterprise Micro 5.4 |
before 1.19.0.4-150000.4.7.1 | 1.19.0.4-150000.4.7.1 |
update-alternativesSUSE:Linux Enterprise Micro 5.5 |
before 1.19.0.4-150000.4.7.1 | 1.19.0.4-150000.4.7.1 |
update-alternativesSUSE:Linux Enterprise Module for Basesystem 15 SP6 |
before 1.19.0.4-150000.4.7.1 | 1.19.0.4-150000.4.7.1 |
update-alternativesSUSE:Linux Enterprise Module for Basesystem 15 SP7 |
before 1.19.0.4-150000.4.7.1 | 1.19.0.4-150000.4.7.1 |
dpkgSUSE:Linux Enterprise Module for Development Tools 15 SP6 |
before 1.19.0.4-150000.4.7.1 | 1.19.0.4-150000.4.7.1 |
dpkgSUSE:Linux Enterprise Module for Development Tools 15 SP7 |
before 1.19.0.4-150000.4.7.1 | 1.19.0.4-150000.4.7.1 |
update-alternativesSUSE:Linux Enterprise Micro 5.1 |
before 1.19.0.4-150000.4.7.1 | 1.19.0.4-150000.4.7.1 |
update-alternativesSUSE:Linux Enterprise Micro 5.2 |
before 1.19.0.4-150000.4.7.1 | 1.19.0.4-150000.4.7.1 |
dpkgopenSUSE:Leap 15.6 |
before 1.19.0.4-150000.4.7.1 | 1.19.0.4-150000.4.7.1 |
update-alternativesopenSUSE:Leap 15.6 |
before 1.19.0.4-150000.4.7.1 | 1.19.0.4-150000.4.7.1 |
update-alternativesSUSE:Linux Micro 6.0 |
before 1.22.0-2.1 | 1.22.0-2.1 |
update-alternativesSUSE:Linux Micro 6.1 |
before 1.22.0-slfo.1.1_2.1 | 1.22.0-slfo.1.1_2.1 |
dpkgUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.16.12ubuntu11.17.1ubuntu11.17.5ubuntu11.17.5ubuntu21.17.5ubuntu3 Show 11 moreShow less1.17.5ubuntu41.17.5ubuntu51.17.5ubuntu5.11.17.5ubuntu5.21.17.5ubuntu5.31.17.5ubuntu5.41.17.5ubuntu5.51.17.5ubuntu5.61.17.5ubuntu5.71.17.5ubuntu5.81.17.5ubuntu5.8+esm1 |
None known |
dpkgUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.18.2ubuntu51.18.3ubuntu11.18.4ubuntu11.18.4ubuntu1.11.18.4ubuntu1.2 Show 6 moreShow less1.18.4ubuntu1.31.18.4ubuntu1.41.18.4ubuntu1.51.18.4ubuntu1.61.18.4ubuntu1.71.18.4ubuntu1.7+esm1 |
None known |
dpkgUbuntu:18.04:LTS |
All versions, plus listed versions 1.18.24ubuntu11.19.0.4ubuntu11.19.0.5ubuntu11.19.0.5ubuntu21.19.0.5ubuntu2.11.19.0.5ubuntu2.21.19.0.5ubuntu2.31.19.0.5ubuntu2.4 |
None known |
dpkgUbuntu:20.04:LTS |
All versions, plus listed versions 1.19.7ubuntu21.19.7ubuntu31.19.7ubuntu3.2 |
None known |
dpkgUbuntu:22.04:LTS |
before 1.21.1ubuntu2.6, plus listed versions 1.20.9ubuntu21.20.9ubuntu31.21.1ubuntu11.21.1ubuntu21.21.1ubuntu2.11.21.1ubuntu2.21.21.1ubuntu2.3 |
1.21.1ubuntu2.6 |
dpkgUbuntu:24.04:LTS |
before 1.22.6ubuntu6.5, plus listed versions 1.22.0ubuntu11.22.1ubuntu21.22.1ubuntu31.22.1ubuntu51.22.2ubuntu2 Show 6 moreShow less1.22.4ubuntu31.22.4ubuntu51.22.6ubuntu51.22.6ubuntu61.22.6ubuntu6.11.22.6ubuntu6.2 |
1.22.6ubuntu6.5 |
dpkgUbuntu:25.10 |
before 1.22.21ubuntu1, plus listed versions 1.22.18ubuntu21.22.18ubuntu3 |
1.22.21ubuntu1 |
dpkgopenSUSE:Tumbleweed |
before 1.22.21-1.1 | 1.22.21-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-6297 is a high vulnerability (CVSS 8.2) in Debian Dpkg, published July 1, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. Fixed in dpkg 1.19.0.5ubuntu2.4+tuxcare.els1.
References
git.dpkg.org/cgit/dpkg/dpkg.git/commit?id=ed6bbd445dd8800308c67236ba35d08004c98e82
lists.debian.org/debian-lts-announce/2026/07/msg00015.html
nvd.nist.gov/vuln/detail/CVE-2025-6297
github.com/advisories/GHSA-w56q-6jw5-h5xf
errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1760024944.html
Show 13 moreShow less
security-tracker.debian.org/tracker/CVE-2025-6297
advisories.mageia.org/MGASA-2025-0204.html
bugs.mageia.org/show_bug.cgi?id=34441
lists.opensuse.org/archives/list/[email protected]/message/FNSLEIUKJQUM5CTEBYJAKWDXADY2FDTH
suse.com/support/update/announcement/2025/suse-su-202502734-1
bugzilla.suse.com/1245573
ubuntu.com/security/CVE-2025-6297
cve.org/CVERecord?id=CVE-2025-6297