Debian Dpkg vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Debian Dpkg: 1 record(s), with affected versions and fixes.
cpe:2.3:a:debian:dpkg

CVE-2026-2219 High · 7.5 CWE-835 Mar 7, 2026

Infinite Loop in Debian Dpkg

It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service (infinite loop spinning the CPU).