漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Information
N/A
Vulnerability Type
密码学签名的验证不恰当
Vulnerability Title
Red Hat libdnf 数据伪造问题漏洞
Vulnerability Description
Red Hat libdnf是美国红帽(Red Hat)公司的一个应用软件。提供一个为libsolv提供简化的C和Python API的库。 libdnf 存在数据伪造问题漏洞,该漏洞源于signature功能允许攻击者实现代码执行。
CVSS Information
N/A
Vulnerability Type
N/A