← Back

Baseurl

baseurl

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Yum
yum
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2013-1910
2Baseurl
Debian
2Debian Linux
Yum
Nov 21, 2024
Oct 31, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository.
CVE-2014-0022
1Baseurl
1Yum
Apr 29, 2026
Jan 26, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows remote attackers to bypass the RMP package signing restricti...Show more
The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows remote attackers to bypass the RMP package signing restriction via an unsigned package.Show less