CVE-2021-3445

A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability.

• CWE-347

• https://bugzilla.redhat.com/show_bug.cgi?id=1932079Issue Tracking, Mitigation, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPMFGGQ5T6WVFTFX3OKMVTTM5O4EXWZR/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4NL7TNWAHJ6JVRABQUPWHKKCTHUZMNF/
• https://bugzilla.redhat.com/show_bug.cgi?id=1932079Issue Tracking, Mitigation, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPMFGGQ5T6WVFTFX3OKMVTTM5O4EXWZR/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4NL7TNWAHJ6JVRABQUPWHKKCTHUZMNF/

Published

May 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34444Windows DNS Server Denial of Service Vulnerability6.5
• CVE-2021-34445Windows Remote Access Connection Manager Elevation of Privil…7.8
• CVE-2021-34446Windows HTML Platforms Security Feature Bypass Vulnerability8
• CVE-2021-34447Windows MSHTML Platform Remote Code Execution Vulnerability6.8
• CVE-2021-34448Scripting Engine Memory Corruption Vulnerability6.8
• CVE-2021-34449Win32k Elevation of Privilege Vulnerability7
• CVE-2021-34450Windows Hyper-V Remote Code Execution Vulnerability8.5
• CVE-2021-34451Microsoft Office Online Server Spoofing Vulnerability5.3
• CVE-2021-34452Microsoft Word Remote Code Execution Vulnerability7.8
• CVE-2021-34453Microsoft Exchange Server Denial of Service Vulnerability7.5
• CVE-2021-34454Windows Remote Access Connection Manager Information Disclos…5.5
• CVE-2021-34455Windows File History Service Elevation of Privilege Vulnerab…7.8