{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-01-14T00:00:00", "descriptions": [{"lang": "en", "value": "The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows remote attackers to bypass the RMP package signing restriction via an unsigned package."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2014-01-26T03:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"name": "65119", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/65119"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://yum.baseurl.org/gitweb?p=yum.git%3Ba=commitdiff%3Bh=9df69e5794"}, {"name": "56637", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/56637"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052440"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1057377"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T08:58:26.613Z"}, "title": "CVE Program Container", "references": [{"name": "65119", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/65119"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://yum.baseurl.org/gitweb?p=yum.git%3Ba=commitdiff%3Bh=9df69e5794"}, {"name": "56637", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/56637"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052440"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1057377"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2014-0022", "datePublished": "2014-01-26T11:00:00", "dateReserved": "2013-12-03T00:00:00", "dateUpdated": "2024-08-06T08:58:26.613Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:baseurl:yum:*:*:*:*:*:*:*:*", "matchCriteriaId": "1BEBBA1D-0651-459D-98CA-F3215397E869", "versionEndIncluding": "3.4.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:baseurl:yum:3.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "5484C2BC-A606-4537-84F7-9203499E3E93", "vulnerable": true}, {"criteria": "cpe:2.3:a:baseurl:yum:3.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "10E52FC3-4ACA-450D-B5C7-1F153A569F31", "vulnerable": true}, {"criteria": "cpe:2.3:a:baseurl:yum:3.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "7BFDAC89-4838-4079-B6C9-0832F6ADCA9F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows remote attackers to bypass the RMP package signing restriction via an unsigned package."}, {"lang": "es", "value": "La funci\u00f3n installUpdates en yum-cron/yum-cron.py en yum 3.4.3 y anteriores no chequea apropiadamente el valor de retorno de la funci\u00f3n sigCheckPkg, lo cual permite a atacantes remotos sortear la restricci\u00f3n de firmado de paquetes RMP a trav\u00e9s de un paquete no firmado."}], "id": "CVE-2014-0022", "lastModified": "2023-02-13T00:29:57.690", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-01-26T16:58:11.197", "references": [{"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/56637"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/bid/65119"}, {"source": "secalert@redhat.com", "url": "http://yum.baseurl.org/gitweb?p=yum.git%3Ba=commitdiff%3Bh=9df69e5794"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052440"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1057377"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2014:1004", "cpe": "cpe:/o:redhat:enterprise_linux:5", "package": "yum-updatesd-1:0.9-6.el5_10", "product_name": "Red Hat Enterprise Linux 5", "release_date": "2014-08-05T00:00:00Z"}], "bugzilla": {"description": "yum: yum-cron installs unsigned packages", "id": "1057377", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1057377"}, "csaw": false, "cvss": {"cvss_base_score": "7.6", "cvss_scoring_vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "status": "verified"}, "cwe": "CWE-252->CWE-347", "details": ["The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows remote attackers to bypass the RMP package signing restriction via an unsigned package.", "It was discovered that yum-updatesd did not properly perform RPM package signature checks. When yum-updatesd was configured to automatically install updates, a remote attacker could use this flaw to install a malicious update on the target system using an unsigned RPM or an RPM signed with an untrusted key."], "name": "CVE-2014-0022", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "yum", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "yum", "product_name": "Red Hat Enterprise Linux 7"}], "public_date": "2014-01-13T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2014-0022\nhttps://nvd.nist.gov/vuln/detail/CVE-2014-0022"], "statement": "This issue did not affect the versions of yum as shipped with Red Hat Enterprise Linux 6 and 7.", "threat_severity": "Important"}