4.3

CVE-2015-0840

The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Dpkg Version <= 1.16.15
Debian ≫ Dpkg Version 1.17.0
Debian ≫ Dpkg Version 1.17.1
Debian ≫ Dpkg Version 1.17.2
Debian ≫ Dpkg Version 1.17.3
Debian ≫ Dpkg Version 1.17.4
Debian ≫ Dpkg Version 1.17.5
Debian ≫ Dpkg Version 1.17.6
Debian ≫ Dpkg Version 1.17.7
Debian ≫ Dpkg Version 1.17.8
Debian ≫ Dpkg Version 1.17.9
Debian ≫ Dpkg Version 1.17.10
Debian ≫ Dpkg Version 1.17.11
Debian ≫ Dpkg Version 1.17.12
Debian ≫ Dpkg Version 1.17.13
Debian ≫ Dpkg Version 1.17.14
Debian ≫ Dpkg Version 1.17.15
Debian ≫ Dpkg Version 1.17.16
Debian ≫ Dpkg Version 1.17.17
Debian ≫ Dpkg Version 1.17.18
Debian ≫ Dpkg Version 1.17.19
Debian ≫ Dpkg Version 1.17.20
Debian ≫ Dpkg Version 1.17.21
Debian ≫ Dpkg Version 1.17.22
Debian ≫ Dpkg Version 1.17.23
Debian ≫ Dpkg Version 1.17.24
Canonical ≫ Ubuntu Linux Version 10.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.83% 0.766
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157387.html
http://lists.opensuse.org/opensuse-updates/2015-06/msg00029.html
http://www.debian.org/security/2015/dsa-3217
Vendor Advisory
http://www.ubuntu.com/usn/USN-2566-1
Patch