CVE-2021-20319: Improper Verification of Cryptographic Signature

An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to modify the original installation image...

PT-2021-13884

Name of the Vulnerable Software and Affected Versions: coreos-installer versions prior to 0.10.1 Description: An improper signature verification issue was found in coreos-installer, allowing a specially crafted gzip installation image to bypass image signature verification. This can lead to the...

CVE-2021-20319

An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to modify the original installation image...