CVE-2011-2515

MEDIUM EPSS 31.2%

Published Nov 27, 20196y ago · Modified Jun 16, 20262w ago

5.3 CVSS 3.1

Medium

Published Nov 27, 2019 6y ago

Last Modified Jun 16, 2026 2w ago

Description

PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code.

CVSS Details

Base Score

5.3

Exploitability

1.8

Impact

3.4

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality Low

Integrity Low

Availability Low

Threat Intelligence

EPSS Exploit Probability

31.2% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-732

Affected Products 5

Vendor	Product	Version	Range
packagekit_project	packagekit	0.6.17	any
debian	debian_linux	8.0	any
debian	debian_linux	9.0	any
debian	debian_linux	10.0	any
redhat	enterprise_linux_server	6.0	any

References 4

access.redhat.com https://access.redhat.com/security/cve/cve-2011-2515

Third Party Advisory
bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2515

Issue TrackingThird Party Advisory
security-tracker.debian.org https://security-tracker.debian.org/tracker/CVE-2011-2515

Third Party Advisory
securityfocus.com https://www.securityfocus.com/bid/48557/info

Third Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.