What is the CVSS score of CVE-2015-0843?

CVE-2015-0843 has a contested CVSS base score of 9.8 from a third party (e.g. CISA-ADP), while the vendor rates it Critical. vuln.today uses the vendor rating as authoritative.

Which versions of Ubuntu are affected by CVE-2015-0843?

Organizations using yubiserver before 0.6 face critical risk from CVE-2015-0843, a buffer overflow vulnerability rated CVSS 9.8.. A patch is available.

How to fix or mitigate CVE-2015-0843?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. If patching is delayed, consider network segmentation to limit exposure.

Ubuntu CVE-2015-0843

EUVD-2015-0855 CRITICAL

Classic Buffer Overflow (CWE-120)

2025-06-26 security@debian.org

Buffer Overflow Ubuntu Debian Yubiserver

Critical

Disputed · 9.8 NVD

Severity by source

Sources disagree (Medium–Critical)

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Ubuntu

MEDIUM

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 15, 2026 - 23:54 euvd

EUVD-2015-0855

Analysis Generated

Mar 15, 2026 - 23:54 vuln.today

CVE Published

Jun 26, 2025 - 22:15 nvd

CRITICAL 9.8

DescriptionCVE.org

yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf.

Analysis

yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf.

Technical ContextAI

A buffer overflow occurs when data written to a buffer exceeds its allocated size, potentially overwriting adjacent memory and corrupting program state. This vulnerability is classified as Classic Buffer Overflow (CWE-120).

RemediationAI

Use memory-safe languages or bounds-checked functions. Enable ASLR, DEP/NX, and stack canaries. Apply vendor patches promptly.

More in Yubiserver

View all

CVE-2015-0842 CRITICAL Act Now

9.8 Jun 26

yubiserver before 0.6 is prone to SQL injection issues, potentially leading to an authentication bypass.

Same weakness CWE-120 – Classic Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2016-10174 CRITICAL POC

9.8

CVE-2016-0099 HIGH POC

7.8

CVE-2016-6366 HIGH POC

8.8

CVE-2013-1331 HIGH

7.8

CVE-2013-0641 HIGH

7.8

CVE-2017-15222 CRITICAL POC

9.8

CVE-2012-2763 HIGH POC

7.5

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2017-11882 HIGH POC

7.8

CVE-2010-3333 HIGH POC

7.8

Vendor StatusVendor

Ubuntu

Priority: Medium

yubiserver

Release	Status	Version
artful	ignored	end of life
bionic	not-affected	0.6-3
cosmic	not-affected	0.6-3
disco	not-affected	0.6-3
precise	ignored	end of life
upstream	released	0.6-1
utopic	ignored	end of life
wily	ignored	end of life
xenial	not-affected	0.6-3
yakkety	ignored	end of life
zesty	ignored	end of life
trusty	DNE	trusty/esm was DNE [trusty was needed]
vivid	ignored	end of life

Debian

Bug #796495

yubiserver

Release	Status	Fixed Version	Urgency
bookworm, bullseye	fixed	0.6-3.1	-
trixie	fixed	0.6-3.2	-
(unstable)	fixed	0.6-1	-

CVE-2015-0843 vulnerability details – vuln.today

Back

Ubuntu CVE-2015-0843

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

More in Yubiserver

Same weakness CWE-120 – Classic Buffer Overflow

Same technique Buffer Overflow

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code