Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2014-0022

yum: yum-cron installs unsigned packages

The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows remote attackers to bypass the RMP package signing restriction via an unsigned package.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Baseurl Redhat
Products
Yum Enterprise Linux
CVE-2013-1910

yum: Not removing bad metadata and using it in next run

yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository.

CVSS 3.1 · 9.8 Critical EPSS 2.6% KEV · Not listed
Vendors
Baseurl Debian
Products
Yum Debian Linux