CVE-2021-3445CWE-347

A flaw was found in libdnf's signature verification functionality in versions before 0.60.1

published May 19, 2021

CVSS
—
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01117 · 65.8th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2021-05-19T13:44Z
EPSS history
Timeline
  • 19 MAY 13:44Z
    A flaw was found in libdnf's signature verification functionality in versions before 0.60.1
    cvelistv5