Debian Dpkg vulnerabilities

CVE-2014-3865 [MEDIUM] CVE-2014-3865: Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1 Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files outside of the intended directories via a source package with a crafted Index: pseudo-header in conjunction with (1) missing --- and +++ header lines or (2) a +++ header line with a blank pathname.

CVE-2022-1664 [CRITICAL] CWE-22 CVE-2022-1664: Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially c

CVE-2017-8283 [CRITICAL] CWE-22 CVE-2017-8283: dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.

CVE-2025-6297 [HIGH] CWE-400 CVE-2025-6297: It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a c It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb p

CVE-2015-0860 [HIGH] CWE-189 CVE-2015-0860: Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debi Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary code via the archive magic version number in an "old-style" Debian binary package, which triggers a stack-based buffer overflow.

CVE-2026-2219 [HIGH] CWE-835 CVE-2026-2219: It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service (infinite loop spinning the CPU).

CVE-2014-8625 [MEDIUM] CWE-134 CVE-2014-8625: Multiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg before Multiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) package or (2) architecture name.

CVE-2010-1679 [MEDIUM] CWE-22 CVE-2010-1679: Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assis Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via directory traversal sequences in a patch for a source-format 3.0 package.

CVE-2014-3864 [MEDIUM] CVE-2014-3864: Directory traversal vulnerability in dpkg-source in dpkg-dev 1 Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directories via a crafted source package that lacks a --- header line.

CVE-2011-0402 [MEDIUM] CWE-59 CVE-2011-0402: dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitr dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecified files in the .pc directory.

CVE-2010-0396 [MEDIUM] CWE-22 CVE-2010-0396: Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify arbitrary files via a crafted Debian source archive.

CVE-2014-0471 [MEDIUM] CWE-22 CVE-2014-0471: Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x befor Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting."

CVE-2014-3127 [HIGH] CVE-2014-3127: dpkg 1.15.9 on Debian squeeze introduces support for the "C-style encoded filenames" feature without dpkg 1.15.9 on Debian squeeze introduces support for the "C-style encoded filenames" feature without recognizing that the squeeze patch program lacks this feature, which triggers an interaction error that allows remote attackers to conduct directory traversal attacks and modify files outside of the intended directories via a crafted source package. NOTE: this c

CVE-2005-2096 [HIGH] CVE-2005-2096: zlib 1 zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.

CVE-2014-3227 [MEDIUM] CWE-22 CVE-2014-3227: dpkg 1.15.9, 1.16.x before 1.16.14, and 1.17.x before 1.17.9 expect the patch program to be complian dpkg 1.15.9, 1.16.x before 1.16.14, and 1.17.x before 1.17.9 expect the patch program to be compliant with a need for the "C-style encoded filenames" feature, but is supported in environments with noncompliant patch programs, which triggers an interaction error that allows remote attackers to conduct directory traversal attacks and modify files outside

CVE-2015-0840 [MEDIUM] CWE-284 CVE-2015-0840: The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attack The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).

CVE-2004-2768 [HIGH] CWE-264 CVE-2004-2768: dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a packa dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid file, (2) setgid file, or (3) device, a related issue to CVE-2010-2059.

CVE-2006-0300 [MEDIUM] CVE-2006-0300: dpkg - Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to ca... Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers. Scope: local bookworm: resolved bullseye: resolved forky: resolved sid: resolved trixie: resolved