A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4464 advisory.

  - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw     allows an attacker to achieve code execution if they can alter the header information of an RPM package     and then trick a user or system into installing it. The highest risk of this vulnerability is to     confidentiality, integrity, as well as system availability. (CVE-2021-3445)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libdnf packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw     allows an attacker to achieve code execution if they can alter the header information of an RPM package     and then trick a user or system into installing it. The highest risk of this vulnerability is to     confidentiality, integrity, as well as system availability. (CVE-2021-3445)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4464 advisory.

  - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw     allows an attacker to achieve code execution if they can alter the header information of an RPM package     and then trick a user or system into installing it. The highest risk of this vulnerability is to     confidentiality, integrity, as well as system availability. (CVE-2021-3445)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4464 advisory.

  - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw     allows an attacker to achieve code execution if they can alter the header information of an RPM package     and then trick a user or system into installing it. The highest risk of this vulnerability is to     confidentiality, integrity, as well as system availability. (CVE-2021-3445)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4464 advisory.

  - libdnf: Signature verification bypass via signature placed in the main RPM header (CVE-2021-3445)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4464 advisory.

  - libdnf: Signature verification bypass via signature placed in the main RPM header (CVE-2021-3445)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libdnf packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw     allows an attacker to achieve code execution if they can alter the header information of an RPM package     and then trick a user or system into installing it. The highest risk of this vulnerability is to     confidentiality, integrity, as well as system availability. (CVE-2021-3445)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2685-1 advisory.

  - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an     attacker who can convince a victim to install a seemingly verifiable package, whose signature header was     modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is     to data integrity, confidentiality, and system availability. (CVE-2021-20271)

  - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can     convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM     database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects     RPM versions before 4.17.0-alpha. (CVE-2021-3421)

  - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw     allows an attacker to achieve code execution if they can alter the header information of an RPM package     and then trick a user or system into installing it. The highest risk of this vulnerability is to     confidentiality, integrity, as well as system availability. (CVE-2021-3445)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
184731	Rocky Linux 8 : dnf (RLSA-2021:4464)	Nessus	Rocky Linux Local Security Checks	high
157972	EulerOS Virtualization 3.0.6.0 : libdnf (EulerOS-SA-2022-1073)	Nessus	Huawei Local Security Checks	high
157631	AlmaLinux 8 : dnf (ALSA-2021:4464)	Nessus	Alma Linux Local Security Checks	high
155508	EulerOS Virtualization 2.9.1 : libdnf (EulerOS-SA-2021-2735)	Nessus	Huawei Local Security Checks	high
155498	EulerOS Virtualization 2.9.0 : libdnf (EulerOS-SA-2021-2772)	Nessus	Huawei Local Security Checks	high
155416	Oracle Linux 8 : dnf (ELSA-2021-4464)	Nessus	Oracle Linux Local Security Checks	high
155088	RHEL 8 : dnf (RHSA-2021:4464)	Nessus	Red Hat Local Security Checks	high
155045	CentOS 8 : dnf (CESA-2021:4464)	Nessus	CentOS Local Security Checks	high
153749	EulerOS 2.0 SP9 : libdnf (EulerOS-SA-2021-2531)	Nessus	Huawei Local Security Checks	high
153731	EulerOS 2.0 SP9 : libdnf (EulerOS-SA-2021-2555)	Nessus	Huawei Local Security Checks	high
153644	EulerOS 2.0 SP8 : libdnf (EulerOS-SA-2021-2468)	Nessus	Huawei Local Security Checks	high
152562	openSUSE 15 Security Update : libdnf (openSUSE-SU-2021:2685-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2021-3445

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high