A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability.

The remote NewStart CGSL host, running version MAIN 6.02, has libdnf packages installed that are affected by a vulnerability:

  - A flaw was found in libdnf's signature verification functionality. This flaw allows an attacker to achieve     code execution if they can alter the header information of an RPM package and then trick a user or system     into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as     system availability. (CVE-2021-3445)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has dnf packages installed that are affected by a vulnerability:

  - A flaw was found in libdnf's signature verification functionality. This flaw allows an attacker to achieve     code execution if they can alter the header information of an RPM package and then trick a user or system     into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as     system availability. (CVE-2021-3445)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has dnf-plugins-core packages installed that are affected by a vulnerability:

  - A flaw was found in libdnf's signature verification functionality. This flaw allows an attacker to achieve     code execution if they can alter the header information of an RPM package and then trick a user or system     into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as     system availability. (CVE-2021-3445)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4464 advisory.

  - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw     allows an attacker to achieve code execution if they can alter the header information of an RPM package     and then trick a user or system into installing it. The highest risk of this vulnerability is to     confidentiality, integrity, as well as system availability. (CVE-2021-3445)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libdnf packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw     allows an attacker to achieve code execution if they can alter the header information of an RPM package     and then trick a user or system into installing it. The highest risk of this vulnerability is to     confidentiality, integrity, as well as system availability. (CVE-2021-3445)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4464 advisory.

  - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw     allows an attacker to achieve code execution if they can alter the header information of an RPM package     and then trick a user or system into installing it. The highest risk of this vulnerability is to     confidentiality, integrity, as well as system availability. (CVE-2021-3445)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4464 advisory.

    dnf     [4.7.0-4.0.1]
    -Fixed python stack trace with updateinfo list cves command [Orabug: 32749660]
    - Replaced upstream bugzilla reporting reference. [Orabug: 32829849]

    [4.7.0-4]
    - Update translations (RhBug:1961632)

    [4.7.0-3]
    - Improve signature checking using rpmkeys (RhBug:1967454)

    [4.7.0-2]
    - Fix covscan issue: dnf/rpm/miscutils.py: fix usage of _()

    [4.7.0-1]
    - Update to 4.7.0
    - New optional parameter for filter_modules enables following modular obsoletes based on a config option     module_obsoletes
    - Fix module remove --all when no match spec (RhBug:1904490)
    - Make an error message more informative (RhBug:1814831)
    - Expand history to full term size when output is redirected (RhBug:1852577) (RhBug:1852577,1906970)
    - Print additional information when verifying GPG key using DNS
    - Enhanced detection of plugins removed in transaction (RhBug:1929163)
    - Improve repo config path ordering to fix a comps merging issue (RhBug:1928181)
    - Keep reason when package is removed (RhBug:1921063)
    - Improve mechanism for application of security filters (RhBug:1918475)
    - [API] Add new method for reset of security filters
    - Remove hardcoded logfile permissions (RhBug:1910084)
    - Preserve file mode during log rotation (RhBug:1910084)
    - Increase loglevel in case of invalid config options
    - Prevent traceback (catch ValueError) if pkg is from cmdline
    - Check for specific key string when verifing signatures (RhBug:1915990)
    - Use rpmkeys binary to verify package signature (RhBug:1915990)
    - [doc] Improve description of modular filtering
    - [doc] deprecated alias for dnf repoquery --deplist <deplist_option-label>
    - [doc] Describe install with just a name and obsoletes (RhBug:1902279)
    - [doc] Fix: 'sslcacert' contains path to the file
    - [doc] Added proxy ssl configuration options, increase libdnf require
    - [doc] Update documentation for module_obsoletes and module_stream_switch
    - [doc] Improve documentation for Hotfix repositories
    - [doc] fix: 'makecache' command downloads only enabled repositories
    - [doc] Add info that maximum parallel downloads is 20
    - [doc] installonly_limit documentation follows behavior
    - [doc] Add documentation for config option sslverifystatus (RhBug:1814383)
    - The noroot plugin no longer exists, remove mention

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4464 advisory.

    dnf is a package manager that allows users to manage packages on their systems. It supports RPMs, modules     and comps groups & environments.

    Security Fix(es):

    * libdnf: Signature verification bypass via signature placed in the main RPM header (CVE-2021-3445)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4464 advisory.

  - libdnf: Signature verification bypass via signature placed in the main RPM header (CVE-2021-3445)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libdnf packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw     allows an attacker to achieve code execution if they can alter the header information of an RPM package     and then trick a user or system into installing it. The highest risk of this vulnerability is to     confidentiality, integrity, as well as system availability. (CVE-2021-3445)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2685-1 advisory.

  - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an     attacker who can convince a victim to install a seemingly verifiable package, whose signature header was     modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is     to data integrity, confidentiality, and system availability. (CVE-2021-20271)

  - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can     convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM     database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects     RPM versions before 4.17.0-alpha. (CVE-2021-3421)

  - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw     allows an attacker to achieve code execution if they can alter the header information of an RPM package     and then trick a user or system into installing it. The highest risk of this vulnerability is to     confidentiality, integrity, as well as system availability. (CVE-2021-3445)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
206860	NewStart CGSL MAIN 6.02 : libdnf Vulnerability (NS-SA-2024-0056)	Nessus	NewStart CGSL Local Security Checks	high
206850	NewStart CGSL MAIN 6.02 : dnf Vulnerability (NS-SA-2024-0064)	Nessus	NewStart CGSL Local Security Checks	high
206849	NewStart CGSL MAIN 6.02 : dnf-plugins-core Vulnerability (NS-SA-2024-0064)	Nessus	NewStart CGSL Local Security Checks	high
184731	Rocky Linux 8 : dnf (RLSA-2021:4464)	Nessus	Rocky Linux Local Security Checks	high
157972	EulerOS Virtualization 3.0.6.0 : libdnf (EulerOS-SA-2022-1073)	Nessus	Huawei Local Security Checks	high
157631	AlmaLinux 8 : dnf (ALSA-2021:4464)	Nessus	Alma Linux Local Security Checks	high
155508	EulerOS Virtualization 2.9.1 : libdnf (EulerOS-SA-2021-2735)	Nessus	Huawei Local Security Checks	high
155498	EulerOS Virtualization 2.9.0 : libdnf (EulerOS-SA-2021-2772)	Nessus	Huawei Local Security Checks	high
155416	Oracle Linux 8 : dnf (ELSA-2021-4464)	Nessus	Oracle Linux Local Security Checks	high
155088	RHEL 8 : dnf (RHSA-2021:4464)	Nessus	Red Hat Local Security Checks	high
155045	CentOS 8 : dnf (CESA-2021:4464)	Nessus	CentOS Local Security Checks	high
153749	EulerOS 2.0 SP9 : libdnf (EulerOS-SA-2021-2531)	Nessus	Huawei Local Security Checks	high
153731	EulerOS 2.0 SP9 : libdnf (EulerOS-SA-2021-2555)	Nessus	Huawei Local Security Checks	high
153644	EulerOS 2.0 SP8 : libdnf (EulerOS-SA-2021-2468)	Nessus	Huawei Local Security Checks	high
152562	openSUSE 15 Security Update : libdnf (openSUSE-SU-2021:2685-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2021-3445

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high