Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka Forbidden) response.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Simple Streams 输入验证漏洞
Vulnerability Description
Simple Streams(simplestreams)是一个使用简单的流数据的库和工具。 Simple Streams中存在安全漏洞,该漏洞源于程序没有正确验证磁盘镜像文件的GPG签名。远程攻击者可借助403响应利用该漏洞伪造磁盘镜像。以下产品及版本受到影响:ubuntu_linux 15.04版本和14.04版本。
CVSS Information
N/A
Vulnerability Type
N/A