Skip to content
Fencer Vulns
high 7.5

CVE-2021-3445 json

A flaw was found in libdnf's signature verification functionality in versions before 0.60.1.

published 2021-05-19 5 y ago modified 2026-06-17 4 mo ago also EUVD-2021-26771

cvss
7.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.1%
EPSS 1.1% chance of exploitation in 30 days, percentile 66%
public exploits
0
none known

Summary

A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability.

Patch / fix

  • rpm libdnf 0.60.1
  • libdnf Debian 14, Debian 13, Debian 12 0.55.2-6

debian advisories DEBIAN-CVE-2021-3445

  • libdnf Ubuntu 22.04 LTS 0.55.2-6

ubuntu advisories UBUNTU-CVE-2021-3445

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • dnf RHEL 8 4.7.0-4.el8
  • yum RHEL 8 4.7.0-4.el8
  • libdnf RHEL 8 0.63.0-3.el8
  • dnf-data RHEL 8 4.7.0-4.el8
  • yum-utils RHEL 8 4.0.21-3.el8
  • python3-dnf RHEL 8 4.7.0-4.el8
  • dnf-automatic RHEL 8 4.7.0-4.el8
  • python3-hawkey RHEL 8 0.63.0-3.el8

red hat advisories RHSA-2021:4464

  • libdnf openSUSE Leap 15.3 0.62.0-5.3.1

opensuse advisories openSUSE-SU-2021:2685-1

  • dnf Rocky Linux 8 4.7.0-4.el8
  • libdnf Rocky Linux 8 0.63.0-3.el8
  • dnf-plugins-core Rocky Linux 8 4.0.21-3.el8

rocky linux advisories RLSA-2021:4464

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2021-3445 updated cvss 6.4

libdnf: Signature verification bypass via signature placed in the main RPM header

  • Red Hat CodeReady Linux Builder (v. 8) libdnf-devel 0.63.0-3.el8, libdnf-debuginfo 0.63.0-3.el8, libdnf-debugsource 0.63.0-3.el8, python3-hawkey-debuginfo 0.63.0-3.el8, python3-libdnf-debuginfo 0.63.0-3.el8 Red Hat Enterprise Linux BaseOS (v. 8) dnf 4.7.0-4.el8, yum 4.7.0-4.el8, libdnf 0.63.0-3.el8, dnf-data 4.7.0-4.el8, yum-utils 4.0.21-3.el8, python3-dnf 4.7.0-4.el8, +7 more
    fixed: vendor fix “A mitigation for this flaw is to set %_pkgverify_level all` or `%_pkgverify_level signature` in `/etc/rpm/macros`.” RHSA-2021:4464
  • Red Hat Enterprise Linux 9 libdnf, python3-hawkey, python3-libdnf
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-24-046-11 updated cvss 7.5

Siemens SCALANCE XCM-/XRM-300

  • Siemens SCALANCE XCH328 (6GK5328-4TS01-2EC2) <V2.4 Siemens SCALANCE XCM324 (6GK5324-8TS01-2AC2) <V2.4 Siemens SCALANCE XCM328 (6GK5328-4TS01-2AC2) <V2.4 Siemens SCALANCE XCM332 (6GK5332-0GA01-2AC2) <V2.4 Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) <V2.4 Siemens SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) <V2.4
    +5 more products
    Siemens SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) <V2.4 Siemens SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) <V2.4 Siemens SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) <V2.4 Siemens SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) <V2.4 Siemens SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) <V2.4
    affected: fixed in V2.4 support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

1.12% chance of exploitation in the next 30 days, higher than 66% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD 2.0 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

  • n/a libdnf

Classification

Weakness
  • CWE-347 Improper Verification of Cryptographic Signature

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.