Unrated severityNVD Advisory· Published Apr 13, 2015· Updated May 6, 2026

CVE-2015-0840

Description

The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.ubuntu.com/usn/USN-2566-1nvdPatch
www.debian.org/security/2015/dsa-3217nvdVendor Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-May/157387.htmlnvd
lists.opensuse.org/opensuse-updates/2015-06/msg00029.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000