CVE-2021-20319
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-20319
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to modify the original installation image can write arbitrary data, and achieve full access to the node being installed.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
密码学签名的验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
coreos-installer 数据伪造问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CoreOs-Installer是一个程序。用于协助安装 Fedora CoreOs（Fcos）和 Red Hat Enterprise Linux 的 CoreOs（Rhcos）。 coreos-installer 存在安全漏洞，攻击者可以通过Gzip压缩图像并使用coreos-installer上的恶意数据来欺骗受害者。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | coreos-installer | Affects coreos-installer before v0.10.1, Fixed in v0.10.1. | - |
II. Public POCs for CVE-2021-20319
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-20319
请登录查看更多情报信息。
- https://bugzilla.redhat.com/show_bug.cgi?id=2011862x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2021-20319
Same Patch Batch · n/a · 2022-03-04 · 45 CVEs total
| CVE-2022-23915 | 7.2 HIGH | Remote Code Execution (RCE) |
| CVE-2022-26484 | 4.9 MEDIUM | Veritas InfoScale Operations Manager路径遍历漏洞 |
| CVE-2022-26483 | 4.8 MEDIUM | Veritas Infoscale Operations Manager 跨站脚本漏洞 |
| CVE-2021-3656 | KVM 安全漏洞 | |
| CVE-2022-23729 | LG mobile 授权问题漏洞 | |
| CVE-2021-27757 | HCL BigFix Insights 安全漏洞 | |
| CVE-2021-27756 | HCL BigFix Compliance 加密问题漏洞 | |
| CVE-2021-44827 | Tp-link Archer C2 操作系统命令注入漏洞 | |
| CVE-2021-40846 | Rhinode Trading Paints 安全漏洞 | |
| CVE-2021-46384 | MingSoft MCMS 访问控制错误漏洞 | |
| CVE-2021-46353 | D-Link Dir-X1860 安全漏洞 | |
| CVE-2022-23233 | Netapp StorageGRID 安全漏洞 | |
| CVE-2022-23232 | Netapp StorageGRID 授权问题漏洞 | |
| CVE-2021-3575 | OpenJPEG 缓冲区错误漏洞 | |
| CVE-2021-3428 | Linux kernel 输入验证错误漏洞 | |
| CVE-2022-21828 | Incapptic Connect 安全漏洞 | |
| CVE-2022-25623 | Symantec Management Center 安全漏洞 | |
| CVE-2021-3744 | Linux kernel 安全漏洞 | |
| CVE-2021-3743 | Linux kernel 缓冲区错误漏洞 | |
| CVE-2022-22946 | Vmware VMware Spring Cloud Gateway 信任管理问题漏洞 |
Showing top 20 of 45 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
Same weakness: CWE-347
- CVE-2026-42193
Plunk: SNS webhook forgery - CVE-2026-44497
ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type - CVE-2026-41669
Admidio: SAML Signature Validation Result Ignored — Forged A - CVE-2026-7689
Dolibarr ERP CRM Online Signature security.lib.php dol_verif - CVE-2026-33467
Improper Verification of Cryptographic Signature in Elastic
V. Comments for CVE-2021-20319
No comments yet