Every CVE Search/ Get API key

CVE-2020-10759

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the...

6.0 MediumPublic exploitFix available

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

0.49%Down 2.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.0

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity.

Record
CVE-2020-10759
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0
3.3 LowAV:L/AC:M/Au:N/C:P/I:P/A:N
Weakness
CWE-347
Updated
2026-11-02
CVE List No score

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity.

Record
CVE-2020-10759
Weakness
CWE-347
Updated
2026-11-02
EUVDEUVD-2020-3175 No score

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity.

Record
EUVD-2020-3175
Updated
2026-11-03
GitHub AdvisoriesGHSA-phhj-vpf5-5666 6.0

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the...

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity.

Record
GHSA-phhj-vpf5-5666
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-347
Updated
2026-11-02
OSV 6.0

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity.

Record
CVE-2020-10759
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2020-10759 6.0

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity.

Record
DEBIAN-CVE-2020-10759
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
Show 13 moreShow less
OSVOESA-2022-1801 6.0

fwupd security update

aims to make updating firmware on Linux automatic, safe and reliable.

Security Fix(es):

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity.(CVE-2020-10759)

Record
OESA-2022-1801
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2020:4436 5.7

Red Hat Security Advisory: gnome-software and fwupd security, bug fix, and enhancement update

Record
RHSA-2020:4436
CVSS 3.1
5.7 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2020:4436 5.7

Low: gnome-software and fwupd security, bug fix, and enhancement update

The gnome-software packages contain an application that makes it easy to add, remove, and update software in the GNOME desktop.

The appstream-data package provides the distribution specific AppStream metadata required for the GNOME and KDE software centers.

The fwupd packages provide a service that allows session software to update device firmware.

The following packages have been upgraded to a later upstream version: gnome-software (3.36.1), fwupd (1.4.2).

Security Fix(es):

  • fwupd: Possible bypass in signature verification (CVE-2020-10759)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Record
RLSA-2020:4436
CVSS 3.1
5.7 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2020-10759 6.0

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity.

Record
UBUNTU-CVE-2020-10759
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVALSA-2020:4436 No score

Low: gnome-software and fwupd security, bug fix, and enhancement update

The gnome-software packages contain an application that makes it easy to add, remove, and update software in the GNOME desktop.

The appstream-data package provides the distribution specific AppStream metadata required for the GNOME and KDE software centers.

The fwupd packages provide a service that allows session software to update device firmware.

The following packages have been upgraded to a later upstream version: gnome-software (3.36.1), fwupd (1.4.2).

Security Fix(es):

  • fwupd: Possible bypass in signature verification (CVE-2020-10759)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2020:4436
Updated
2026-11-05
OSVMGASA-2021-0158 No score

Updated fwupd packages fix a security vulnerability

A PGP signature bypass was found in fwupd, which could lead to possible installation of unsigned firmware (CVE-2020-10759).

Record
MGASA-2021-0158
Updated
2026-11-02
OSVopenSUSE-SU-2020:0849-1 No score

Security update for fwupd

This update for fwupd fixes the following issues:

  • CVE-2020-10759: Fixed a potential PGP signature bypass, which could have led to installation of unsigned firmware (bsc#1172643)

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Record
openSUSE-SU-2020:0849-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:0522-1 No score

Security update for fwupd

This update for fwupd fixes the following issues:

  • Update to version 1.2.14: (bsc#1182057)
  • Add SBAT section to EFI images (bsc#1182057)
  • CVE-2020-10759: Validate that gpgme_op_verify_result() returned at least one signature (bsc#1172643)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:0522-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10774-1 No score

dfu-tool-1.5.8-1.5 on GA media

These are all security issues fixed in the dfu-tool-1.5.8-1.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10774-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10951-1 No score

jcat-tool-0.1.3-1.8 on GA media

These are all security issues fixed in the jcat-tool-0.1.3-1.8 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10951-1
Updated
2026-11-02
OSVSUSE-SU-2020:1681-1 No score

Security update for fwupd

This update for fwupd fixes the following issues:

  • CVE-2020-10759: Fixed a potential PGP signature bypass, which could have led to installation of unsigned firmware (bsc#1172643)
Record
SUSE-SU-2020:1681-1
Updated
2026-11-02
OSVSUSE-SU-2021:1107-1 No score

Security update for fwupd

This update for fwupd fixes the following issues:

  • Update to version 1.2.14: (bsc#1182057)
  • Add SBAT section to EFI images (bsc#1182057)
  • CVE-2020-10759: Validate that gpgme_op_verify_result() returned at least one signature (bsc#1172643)
Record
SUSE-SU-2021:1107-1
Updated
2026-11-02
OSVUSN-4395-1 No score

fwupd vulnerability

Justin Steven discovered that fwupd incorrectly handled certain signature verification. An attacker could possibly use this issue to install an unsigned firmware.

Record
USN-4395-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
appstream-data
AlmaLinux:8
 before 8-20200724.el8
8-20200724.el8
libxmlb
AlmaLinux:8
 before 0.1.15-1.el8
0.1.15-1.el8
fwupd
Debian:12
 before 1.3.10-1
1.3.10-1
fwupd
Debian:13
 before 1.3.10-1
1.3.10-1
fwupd
Debian:14
 before 1.3.10-1
1.3.10-1
libjcat
Debian:12
 before 0.1.3-1
0.1.3-1
libjcat
Debian:13
 before 0.1.3-1
0.1.3-1
libjcat
Debian:14
 before 0.1.3-1
0.1.3-1
fwupd
Debian:9
 before 0.7.4-2+deb9u1, plus listed versions
0.7.4-2
0.7.4-2+deb9u1
fwupd
Mageia:7
 before 1.2.8-1.1.mga7
1.2.8-1.1.mga7
Show 24 moreShow less
Affected packages
PackageAffectedFixed
fwupd
openEuler:20.03-LTS-SP1
 before 1.2.9-5.oe1
1.2.9-5.oe1
fwupd
openEuler:20.03-LTS-SP3
 before 1.2.9-5.oe1
1.2.9-5.oe1
fwupd
openEuler:22.03-LTS
 before 1.2.9-5.oe2203
1.2.9-5.oe2203
appstream-data
Red Hat:enterprise_linux:8::appstream
 before 0:8-20200724.el8
0:8-20200724.el8
gnome-software
Red Hat:enterprise_linux:8::appstream
 before 0:3.36.1-4.el8
0:3.36.1-4.el8
gnome-software-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.36.1-4.el8
0:3.36.1-4.el8
gnome-software-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:3.36.1-4.el8
0:3.36.1-4.el8
fwupd
Red Hat:enterprise_linux:8::baseos
 before 0:1.4.2-4.el8
0:1.4.2-4.el8
fwupd-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.4.2-4.el8
0:1.4.2-4.el8
fwupd-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:1.4.2-4.el8
0:1.4.2-4.el8
libxmlb
Red Hat:enterprise_linux:8::baseos
 before 0:0.1.15-1.el8
0:0.1.15-1.el8
libxmlb-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.1.15-1.el8
0:0.1.15-1.el8
libxmlb-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:0.1.15-1.el8
0:0.1.15-1.el8
libxmlb-tests-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.1.15-1.el8
0:0.1.15-1.el8
appstream-data
Rocky Linux:8
 before 0:8-20200724.el8
0:8-20200724.el8
libxmlb
Rocky Linux:8
 before 0:0.1.15-1.el8
0:0.1.15-1.el8
fwupd
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
 before 1.0.9-6.3.1
1.0.9-6.3.1
fwupd
SUSE:Linux Enterprise Module for Desktop Applications 15 SP2
 before 1.2.14-5.8.2
1.2.14-5.8.2
fwupd
Ubuntu:16.04:LTS
 before 0.8.3-0ubuntu5.1, plus listed versions
0.1.5-0ubuntu30.6.0-10.6.2-10.6.2-1ubuntu10.6.2-1ubuntu2
Show 12 moreShow less
0.6.2-1ubuntu30.6.3-0ubuntu20.7.0-0ubuntu20.7.0-0ubuntu30.7.0-0ubuntu40.7.0-0ubuntu4.10.7.0-0ubuntu4.20.7.0-0ubuntu4.30.8.3-0ubuntu20.8.3-0ubuntu30.8.3-0ubuntu40.8.3-0ubuntu5
0.8.3-0ubuntu5.1
fwupd
Ubuntu:18.04:LTS
 before 1.2.10-1ubuntu2~ubuntu18.04.5, plus listed versions
0.9.7-21.0.0-41.0.0-51.0.1-21.0.2-1
Show 6 moreShow less
1.0.4-31.0.4-3build11.0.5-11.0.6-21.0.9-0ubuntu21.2.10-1ubuntu2~ubuntu18.04.3
1.2.10-1ubuntu2~ubuntu18.04.5
fwupd
Ubuntu:20.04:LTS
 before 1.3.9-4ubuntu0.1, plus listed versions
1.2.10-1ubuntu21.3.3-31.3.5-11.3.6-1ubuntu11.3.7-2
Show 8 moreShow less
1.3.7-31.3.8-11.3.9-11.3.9-1build11.3.9-21.3.9-2build11.3.9-31.3.9-4
1.3.9-4ubuntu0.1
fwupd
openSUSE:Leap 15.1
 before 1.0.9-lp151.2.3.1
1.0.9-lp151.2.3.1
fwupd
openSUSE:Leap 15.2
 before 1.2.14-lp152.3.9.1
1.2.14-lp152.3.9.1
fwupd
openSUSE:Tumbleweed
 before 1.5.8-1.5
1.5.8-1.5

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubjustinsteven/CVE-2020-10759-poc2020-06-06

History

History
RecordedChangedSources
facts, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-10759 is a medium vulnerability (CVSS 6.0) in Redhat Enterprise Linux, published June 9, 2020. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. Fixed in appstream-data 8-20200724.el8.

References

Show 32 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open