Skip to content
OpenAdvisories

Package · crates.io

coreos-installer

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2021-20319

    coreos-installer improperly verifies GPG signature when decompressing gzipped artifact

    An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to …

    coreos-installer crates.io