rpm vulnerabilities (Azure Linux)
11 vulnerabilities.
-
rpmAzure Linux Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag 7.1 High -
rpmAzure Linux Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages 7.1 High -
rpmAzure Linux Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm 7.8 High -
rpmAzure Linux Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows) 7.8 High -
rpmAzure Linux Rpm: command injection in rpmuncompress via unescaped filenames passed to popen() 7.8 High -
rpmAzure Linux Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames 7.0 High -
rpmAzure Linux Rpm: heap buffer overflow in ndb slot table parsing 5.5 Medium -
rpmAzure Linux It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only... 6.7 Medium -
rpmAzure Linux A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and... 6.7 Medium -
rpmAzure Linux A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to... 6.4 Medium -
rpmAzure Linux There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary... 4.7 Medium