4.3

CVE-2015-0840

The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).

Data is provided by the National Vulnerability Database (NVD)
Debian ≫ Dpkg Version <= 1.16.15
Debian ≫ Dpkg Version1.17.0
Debian ≫ Dpkg Version1.17.1
Debian ≫ Dpkg Version1.17.2
Debian ≫ Dpkg Version1.17.3
Debian ≫ Dpkg Version1.17.4
Debian ≫ Dpkg Version1.17.5
Debian ≫ Dpkg Version1.17.6
Debian ≫ Dpkg Version1.17.7
Debian ≫ Dpkg Version1.17.8
Debian ≫ Dpkg Version1.17.9
Debian ≫ Dpkg Version1.17.10
Debian ≫ Dpkg Version1.17.11
Debian ≫ Dpkg Version1.17.12
Debian ≫ Dpkg Version1.17.13
Debian ≫ Dpkg Version1.17.14
Debian ≫ Dpkg Version1.17.15
Debian ≫ Dpkg Version1.17.16
Debian ≫ Dpkg Version1.17.17
Debian ≫ Dpkg Version1.17.18
Debian ≫ Dpkg Version1.17.19
Debian ≫ Dpkg Version1.17.20
Debian ≫ Dpkg Version1.17.21
Debian ≫ Dpkg Version1.17.22
Debian ≫ Dpkg Version1.17.23
Debian ≫ Dpkg Version1.17.24
Canonical ≫ Ubuntu Linux Version10.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.65% 0.7
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.