CVE-2015-0840

Source
https://cve.org/CVERecord?id=CVE-2015-0840
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2015-0840.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2015-0840
Downstream
Related
Withdrawn
2026-01-27T04:13:44.337043Z
Published
2015-04-13T14:59:01Z
Modified
2026-01-27T04:13:44.337043Z
Summary
[none]
Details

The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).

References

Affected packages