VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 13, 2015· Updated Jun 17, 2026

CVE-2015-0840

CVE-2015-0840

Description

The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

32
  • Debian/Dpkg27 versions
    cpe:2.3:a:debian:dpkg:*:*:*:*:*:*:*:*+ 26 more
    • cpe:2.3:a:debian:dpkg:*:*:*:*:*:*:*:*range: <=1.16.15
    • cpe:2.3:a:debian:dpkg:1.17.0:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.1:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.10:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.11:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.12:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.13:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.14:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.15:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.16:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.17:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.18:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.19:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.2:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.20:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.21:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.22:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.23:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.24:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.3:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.4:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.5:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.6:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.7:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.8:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:dpkg:1.17.9:*:*:*:*:*:*:*
    • (no CPE)range: <1.16.16, <1.17.25
  • Canonical/Ubuntu Linux4 versions
    cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
  • osv-coords
    pkg:rpm/opensuse/dpkg&distro=openSUSE%20Tumbleweed
    Range: < 1.18.10-1.4

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.