High severity7.5NVD Advisory· Published Nov 29, 2019· Updated Jun 17, 2026
CVE-2015-3406
CVE-2015-3406
Description
The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:module-signature_project:module-signature:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:module-signature_project:module-signature:*:*:*:*:*:*:*:*range: <0.74
- (no CPE)range: <0.74
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
- Module::Signature/Module::Signaturedescription
Patches
Vulnerability mechanics
References
5- ubuntu.com/usn/usn-2607-1nvdPatchRelease NotesThird Party Advisory
- www.openwall.com/lists/oss-security/2015/04/07/1nvdMailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2015/04/23/17nvdMailing ListPatchThird Party Advisory
- github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5aa1c7d1c7bc85372fnvdPatchThird Party Advisory
- metacpan.org/changes/distribution/Module-SignaturenvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.