Known vulnerabilities in dpkg (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:dpkg_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dpkg (Ubuntu package) dpkg (Ubuntu package) is affected by 2 known vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113836 - Incorrect Default Permissions
CVE-2025-6297
CWE-276 Low
No
No
1.21.1ubuntu2.6, 1.22.6ubuntu6.5, 1.22.18ubuntu2.2 12.08.2025 SB2025081248
SB2025081249
SB2025081250
and 7 more
#VU63711 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-1664
CWE-22 Medium
No
No
1.18.4ubuntu1.7+esm1, 1.19.0.5ubuntu2.4, 1.19.7ubuntu3.2, 1.20.9ubuntu2.2, 1.21.1ubuntu2.1 26.05.2022 SB2022052610
SB2022052613
SB2022052622
and 9 more