Yum

This hub aggregates every CVE we track for Yum, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 3 most recently published vulnerabilities affecting Yum.

• CVE-2013-1910yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repos...9.8Oct 31, 2019
• CVE-2018-10897A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they m...8.1Aug 1, 2018
• CVE-2014-0022The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows remote attackers to bypass the RMP pa...5.0Jan 26, 2014