ISOMAN

CVE

CVE-2015-3406

The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors.

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://ubuntu.com/usn/usn-2607-1
  2. http://www.openwall.com/lists/oss-security/2015/04/07/1
  3. http://www.openwall.com/lists/oss-security/2015/04/23/17
  4. https://github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5aa1c7d1c7bc85372f
  5. https://metacpan.org/changes/distribution/Module-Signature
  6. http://ubuntu.com/usn/usn-2607-1
  7. http://www.openwall.com/lists/oss-security/2015/04/07/1
  8. http://www.openwall.com/lists/oss-security/2015/04/23/17
  9. https://github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5aa1c7d1c7bc85372f
  10. https://metacpan.org/changes/distribution/Module-Signature