Debian dpkg vulnerabilities
4 published CVEs name Debian dpkg among the affected products.
- 4Published CVEs3 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-91094
A directory traversal bug was discovered when unpacking 3.0 (quilt) source packages, where the packaging tarball could contain the quilt database directory…
Debian · dpkg
Not scored - CVE-2026-2219
It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when…
Debian · dpkg
High7.5 - CVE-2025-6297
dpkg-deb: Fix cleanup for control member with restricted directories
Debian · dpkg
High8.2 - CVE-2022-1664
directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar
Debian · dpkg
Critical9.8