CVE-2010-1679: Debian Dpkg

Medium severity, CVSS 6.8. EPSS: 3.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via directory traversal sequences in a patch for a source-format 3.0 package.

Affected products

• Debian Dpkg: up to and including 1.14.30; version 1.9.19 only; version 1.9.20 only; version 1.9.21 only; version 1.10 only; version 1.10.1 only; …

Published 2011-01-11. Last modified 2026-06-16.