medium6.8
CVE-2015-1337
Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and hav…
Impact
Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka Forbidden) response.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simpestreams Project | Simplestreams | All versions |
| Canonical | Ubuntu Linux | Versions 14.04, 15.04 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ubuntu.com/usn/USN-2746-1
- http://www.ubuntu.com/usn/USN-2746-2
- https://bugs.launchpad.net/ubuntu/%2Bsource/simplestreams/%2Bbug/1487004
- http://www.ubuntu.com/usn/USN-2746-1
- http://www.ubuntu.com/usn/USN-2746-2
- https://bugs.launchpad.net/ubuntu/%2Bsource/simplestreams/%2Bbug/1487004