CVE-2011-0402: Debian Dpkg

Medium severity, CVSS 6.8. EPSS: 2.9% chance of exploitation in the next 30 days.

dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecified files in the .pc directory.

Affected products

• Debian Dpkg: up to and including 1.14.30; version 1.9.19 only; version 1.9.20 only; version 1.9.21 only; version 1.10 only; version 1.10.1 only; …

Published 2011-01-11. Last modified 2026-06-16.