← Back

CVE-2015-0840

nvd nist
Published: Apr 13, 2015Modified: May 6, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).

Affected (30)

1 product
Dpkg
1 product
Ubuntu Linux
Configuration A
26 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Up to 1.16.15
Version 1.17.0
Version 1.17.10
Version 1.17.11
Version 1.17.12
Version 1.17.13
Version 1.17.14
Version 1.17.15
Version 1.17.16
Version 1.17.17
Version 1.17.18
Version 1.17.19
Version 1.17.1
Version 1.17.20
Version 1.17.21
Version 1.17.22
Version 1.17.23
Version 1.17.24
Version 1.17.2
Version 1.17.3
Version 1.17.4
Version 1.17.5
Version 1.17.6
Version 1.17.7
Version 1.17.8
Version 1.17.9
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 10.04
Version 12.04
Version 14.04
Version 14.10

References (8)

Source: security@debian.org
Vendor Advisory
Source: security@debian.org
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.