CVE-2021-3445

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-347

Affected software

No affected versions have been published.

Timeline

Published
May 19, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-344508.5Windows Hyper-V Remote Code Execution VulnerabilityCVE-2021-344515.3Microsoft Office Online Server Spoofing VulnerabilityCVE-2021-344527.8Microsoft Word Remote Code Execution VulnerabilityCVE-2021-344537.5Microsoft Exchange Server Denial of Service VulnerabilityCVE-2021-344545.5Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2021-344557.8Windows File History Service Elevation of Privilege VulnerabilityCVE-2021-344567.8Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2021-344575.5Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2021-344589.9Windows Kernel Remote Code Execution VulnerabilityCVE-2021-344597.8Windows AppContainer Elevation Of Privilege VulnerabilityCVE-2021-34465.5A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability relateCVE-2021-344607.8Windows Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-3445: High severity, CVSS 7.5 | Vulnix