CVE-2010-0396: Debian Dpkg

Medium severity, CVSS 5.8. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify arbitrary files via a crafted Debian source archive.

Affected products

• Debian Dpkg: up to and including 1.14.28; version 1.9.19 only; version 1.9.20 only; version 1.9.21 only; version 1.10 only; version 1.10.1 only; …

Published 2010-03-15. Last modified 2026-06-16.