CVE-2015-3408

EPSS 3.9%

Published: 5/19/2015Modified: 4/28/2026

Also known as:DEBIAN-CVE-2015-3408

Description

Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.

Affected packages (1)

Debian/libmodule-signature-perlfrom 0, < 0.78-1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2015-3408