CVE-2011-2515
Publication date 27 November 2019
Last updated 25 August 2025
Ubuntu priority
Description
PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| packagekit | ||
| 14.04 LTS trusty | Not in release | |
Notes
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
5.3 · Medium
|
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | Low |
| Integrity impact | Low |
| Availability impact | Low |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |