Coreos-installer (Redhat) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2022-08-23. Vendor: Redhat.

CVEs of Coreos-installer

• CVE-2021-3917 - CVSS 5.5 (medium), 2022-08-23: A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions. This flaw allows a…
• CVE-2021-20319 - CVSS 7.8 (high), 2022-03-04: An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature…