medium4.3
CVE-2015-0840
The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian s…
Impact
The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Dpkg | through 1.16.15 Versions 1.17.0, 1.17.1, 1.17.2, 1.17.3, 1.17.4 |
| Canonical | Ubuntu Linux | Versions 10.04, 12.04, 14.04, 14.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157387.html
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00029.html
- http://www.debian.org/security/2015/dsa-3217
- http://www.ubuntu.com/usn/USN-2566-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157387.html
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00029.html
- http://www.debian.org/security/2015/dsa-3217
- http://www.ubuntu.com/usn/USN-2566-1