6.8
CVE-2015-1337
- EPSS 0.33%
- Veröffentlicht 09.10.2015 14:59:00
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle security@ubuntu.com
- CVE-Watchlists
- Unerledigt
LoginSimple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka Forbidden) response.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Simpestreams Project ≫ Simplestreams Version-
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version15.04
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.33% | 0.555 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.