CPE Details
PackageKit Project PackageKit 0.6.17
0.6.17
2019-09-26
13h48 +00:00
13h48 +00:00
2019-09-26
13h48 +00:00
13h48 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:packagekit_project:packagekit:0.6.17:*:*:*:*:*:*:*
Informations
Vendor
packagekit_projectProduct
packagekitVersion
0.6.17Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost. | 3.3 |
Bas |
||
| A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists. | 3.3 |
Bas |
||
| PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code. | 5.3 |
Moyen |
||
| An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system. | 5.5 |
Moyen |
||
| The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method. | 2.1 |
2025©
tesweb SA
