CVEvulnerability

CVE-2015-0840

4.3 MEDIUM Published 2015-04-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-04-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-284

Description

The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).

Affected configurations

• debian dpkg (<= 1.16.15) • debian dpkg 1.17.0 • debian dpkg 1.17.1 • debian dpkg 1.17.2 • debian dpkg 1.17.3 • debian dpkg 1.17.4 • debian dpkg 1.17.5 • debian dpkg 1.17.6 • debian dpkg 1.17.7 • debian dpkg 1.17.8 • debian dpkg 1.17.9 • debian dpkg 1.17.10 • debian dpkg 1.17.11 • debian dpkg 1.17.12 • debian dpkg 1.17.13 • debian dpkg 1.17.14 • debian dpkg 1.17.15 • debian dpkg 1.17.16 • debian dpkg 1.17.17 • debian dpkg 1.17.18 • debian dpkg 1.17.19 • debian dpkg 1.17.20 • debian dpkg 1.17.21 • debian dpkg 1.17.22 • debian dpkg 1.17.23 • debian dpkg 1.17.24 • canonical ubuntu linux 10.04 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 14.10

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References