[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

 
Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2015-0840Date: (C)2015-04-13   (M)2023-12-22


The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
DSA-3217
FEDORA-2015-6974
USN-2566-1
openSUSE-SU-2015:1058

CPE    30
cpe:/a:debian:dpkg:1.17.22
cpe:/a:debian:dpkg:1.17.23
cpe:/a:debian:dpkg:1.17.24
cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~
...
CWE    1
CWE-284
OVAL    5
oval:org.secpod.oval:def:108852
oval:org.secpod.oval:def:52452
oval:org.secpod.oval:def:602034
oval:org.secpod.oval:def:108853
...

© SecPod Technologies