dpkg vulnerabilities (Debian)

17 vulnerabilities.

• dpkg Debian It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does... CVE-2026-2219 Fix available 7.5 HighMarch 7, 2026
• dpkg Debian dpkg-deb: Fix cleanup for control member with restricted directories CVE-2025-6297 Fix available 8.2 HighJuly 1, 2025
• dpkg Debian directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar CVE-2022-1664 Fix available 9.8 CriticalMay 25, 2022
• dpkg Debian dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not... CVE-2017-8283 Fix available 9.8 CriticalApril 26, 2017
• dpkg Debian Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in... CVE-2015-0860 Fix available 7.5 HighNovember 26, 2015
• dpkg Debian The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote... CVE-2015-0840 Fix available 4.3 MediumApril 9, 2015
• dpkg Debian Multiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg... CVE-2014-8625 Fix available 6.8 MediumJanuary 20, 2015
• dpkg Debian Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote... CVE-2014-3865 Public exploitFix available 6.4 MediumMay 30, 2014
• dpkg Debian Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to... CVE-2014-3864 Fix available 6.4 MediumMay 30, 2014
• dpkg Debian dpkg 1.15.9, 1.16.x before 1.16.14, and 1.17.x before 1.17.9 expect the patch program to be... CVE-2014-3227 Fix available 6.4 MediumApril 30, 2014
• dpkg Debian dpkg 1.15.9 on Debian squeeze introduces support for the "C-style encoded filenames" feature... CVE-2014-3127 Fix available 7.1 HighApril 30, 2014
• dpkg Debian Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x... CVE-2014-0471 Fix available 5.0 MediumApril 28, 2014
• dpkg Debian dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify... CVE-2011-0402 Fix available 6.8 MediumJanuary 6, 2011
• dpkg Debian Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user... CVE-2010-1679 Fix available 6.8 MediumJanuary 6, 2011
• dpkg Debian dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a... CVE-2004-2768 Fix available 7.2 HighJune 8, 2010
• dpkg Debian Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows... CVE-2010-0396 Fix available 5.8 MediumMarch 10, 2010
• dpkg Debian zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a... CVE-2005-2096 Fix available 7.5 HighJuly 6, 2005