CVE-2015-1337

Description

Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka Forbidden) response.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-1477

https://bugs.launchpad.net/ubuntu/%2Bsource/simplestreams/%2Bbug/1487004

http://www.ubuntu.com/usn/USN-2746-2

http://www.ubuntu.com/usn/USN-2746-1

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS