Remote Code Execution Vulnerability in Debian Dpkg Command
CVE-2015-0840

Currently unrated

Key Information:

Vendor
Debian
Status
Dpkg
Vendor
CVE Published:
13 April 2015

Summary

The dpkg-source command in Debian's dpkg version prior to 1.16.16 and 1.17.x before 1.17.25 is susceptible to a security flaw that enables remote attackers to bypass signature verification. This is achieved through the manipulation of a crafted Debian source control file (.dsc), which can lead to potential unauthorized access and execution of malicious code. System administrators are encouraged to review and apply the latest security updates to mitigate this risk.

References

http://www.ubuntu.com/usn/USN-2566-1
vendor-advisoryx_refsource_UBUNTU
http://lists.fedoraproject.org/pipermail/package-announce...
vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-updates/2015-06/msg000...
vendor-advisoryx_refsource_SUSE

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.