CVE-2015-1337 Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka...
MediumCVSS 6.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka Forbidden) response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simpestreams project simplestreams | All versions | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
References
- USN-2746-1 vendor-advisory
- USN-2746-2 vendor-advisory
- bugs.launchpad.net exploit