CVE-2014-0022

The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows…

published January 26, 2014

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows remote attackers to bypass the RMP package signing restriction via an unsigned package.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02699 · 85.8th percentile
Published
2014-01-26T11:00Z
EPSS history
Timeline
  • 26 JAN 11:00Z
    The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows…
    cvelistv5