Rpm-ostree

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Rpm-ostree records in CISA KEV

No Rpm-ostree vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2017-01874 CVE-2017-2623 · GHSA-v473-h83f-x76x

LOW 26

It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering.

CVSS 3.0MEDIUM 5.3 Network No auth User interaction EPSS 0.01013 Published 2018-07-27 Fixed CWE-295