BaseurlCVEs & Vulnerabilities
2 CVEs affecting Baseurl products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
yum 5
CVE-2013-1910CRITICAL
yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository.
31 Oct 2019
9.8
CVSS
CVE-2014-0022MEDIUM
The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows remote attackers to bypass the RMP package signing restriction via an unsigned package.
26 Jan 2014
5.0
CVSS
← PrevPage 1 / 1Next →