Lucene search

K
cvelistRedhatCVELIST:CVE-2014-0022
HistoryJan 26, 2014 - 11:00 a.m.

CVE-2014-0022

2014-01-2611:00:00
redhat
www.cve.org
5

AI Score

9.3

Confidence

High

EPSS

0.006

Percentile

78.5%

The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows remote attackers to bypass the RMP package signing restriction via an unsigned package.

AI Score

9.3

Confidence

High

EPSS

0.006

Percentile

78.5%