Lucene search
Gentoo FoundationMGASA-2015-0197HistoryMay 06, 2015 - 7:44 p.m.
Updated dpkg packages fix CVE-2015-0840
2015-05-0619:44:10
Gentoo Foundation
advisories.mageia.org
9
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.5%
Updated dpkg packages fix security vulnerability: The dpkg-source command in Debian dpkg before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc) (CVE-2015-0840).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | dpkg | < 1.17.25-1.1 | dpkg-1.17.25-1.1.mga4 |
Related
cve
cve
CVE-2015-0840
2015-04-13 14:59:01
securityvulns
securityvulns
[SECURITY] [DSA 3217-1] dpkg security update
2015-04-13 00:00:00
dpkg protection bypass
2015-04-13 00:00:00
prion
prion
Design/Logic Flaw
2015-04-13 14:59:00
debiancve
debiancve
CVE-2015-0840
2015-04-13 14:59:01
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0197)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-2566-1)
2015-04-10 00:00:00
Debian Security Advisory DSA 3217-1 (dpkg - security update)
2015-04-09 00:00:00
nessus
nessus
openSUSE Security Update : dpkg / update-alternatives (openSUSE-2015-421)
2015-06-15 00:00:00
Debian DSA-3217-1 : dpkg - security update
2015-04-10 00:00:00
Ubuntu 14.04 LTS : dpkg vulnerability (USN-2566-1)
2015-04-10 00:00:00
debian
debian
[SECURITY] [DLA 220-1] dpkg security update
2015-05-15 22:49:32
[SECURITY] [DSA 3217-1] dpkg security update
2015-04-09 19:14:16
[SECURITY] [DSA 3217-1] dpkg security update
2015-04-09 19:14:16
ubuntu
ubuntu
dpkg vulnerability
2015-04-09 00:00:00
ubuntucve
ubuntucve
CVE-2015-0840
2015-04-09 00:00:00
osv
osv
dpkg - security update
2015-05-15 00:00:00
cvelist
cvelist
CVE-2015-0840
2015-04-13 14:00:00
nvd
nvd
CVE-2015-0840
2015-04-13 14:59:01
fedora
fedora
[SECURITY] Fedora 22 Update: dpkg-1.16.16-5.fc22
2015-05-08 07:45:09
[SECURITY] Fedora 21 Update: dpkg-1.16.16-5.fc21
2015-05-12 20:48:24
[SECURITY] Fedora 20 Update: dpkg-1.16.16-5.fc20
2015-05-12 20:49:31
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.5%
Related for MGASA-2015-0197