Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Information
N/A
Vulnerability Type
密码学签名的验证不恰当
Vulnerability Title
Red Hat libdnf 数据伪造问题漏洞
Vulnerability Description
Red Hat libdnf是美国红帽（Red Hat）公司的一个应用软件。提供一个为libsolv提供简化的C和Python API的库。 libdnf 存在数据伪造问题漏洞，该漏洞源于signature功能允许攻击者实现代码执行。
CVSS Information
N/A
Vulnerability Type
N/A