CVE-2011-2515
Publication date 27 November 2019
Last updated 25 August 2025
Ubuntu priority
Description
PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| packagekit | ||
| 14.04 LTS trusty | Not in release | |
Notes
Severity score breakdown
CVSS version: CVSS v3.0
Base score
5.3 · Medium
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L