AZL-79509
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-79509.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-79509
- Upstream
- Published
- 2026-03-07T09:16:07Z
- Modified
- 2026-04-01T05:23:27.836398Z
- Summary
- CVE-2026-2219 affecting package dpkg 1.20.10-1
- Details
-
It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service (infinite loop spinning the CPU).
- References