CVE-2015-0840

MEDIUM 4.3CVE-2015-0840 · Published 13/04/2015 · updated 17/06/2026

In short

CVE-2015-0840 is a MEDIUM (CVSS 4.3) vulnerability affecting dpkg (debian).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
dpkg debian	`= 1.17.0= 1.17.1= 1.17.10= 1.17.11= 1.17.12= 1.17.13= 1.17.14= 1.17.15= 1.17.16= 1.17.17= 1.17.18= 1.17.19= 1.17.2= 1.17.20= 1.17.21= 1.17.22= 1.17.23= 1.17.24= 1.17.3= 1.17.4= 1.17.5= 1.17.6= 1.17.7= 1.17.8= 1.17.9≤ 1.16.15`	No fix yet

Description

The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).

References

More vulnerabilities in dpkg

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

dpkg

debian

= 1.17.0= 1.17.1= 1.17.10= 1.17.11= 1.17.12= 1.17.13= 1.17.14= 1.17.15= 1.17.16= 1.17.17= 1.17.18= 1.17.19= 1.17.2= 1.17.20= 1.17.21= 1.17.22= 1.17.23= 1.17.24= 1.17.3= 1.17.4= 1.17.5= 1.17.6= 1.17.7= 1.17.8= 1.17.9≤ 1.16.15

No fix yet

More vulnerabilities in dpkg

See all →