rpm vulnerabilities (Debian)
33 vulnerabilities.
-
rpmDebian Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag 7.1 High -
rpmDebian Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages 7.1 High -
rpmDebian Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm 7.8 High -
rpmDebian Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows) 7.8 High -
rpmDebian Rpm: command injection in rpmuncompress via unescaped filenames passed to popen() 7.8 High -
rpmDebian Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path 7.8 High -
rpmDebian Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames 7.0 High -
rpmDebian Rpm: rpmbuild gettarspec() crafted tar member name → macro injection 7.0 High -
rpmDebian Rpm: heap buffer overflow in ndb slot table parsing 5.5 Medium -
rpmDebian Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command 7.0 High -
rpmDebian It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only... 6.7 Medium -
rpmDebian A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and... 6.7 Medium -
rpmDebian A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to... 6.4 Medium -
rpmDebian There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary... 4.7 Medium -
rpmDebian A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who... 5.5 Medium -
rpmDebian A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can... 4.9 Medium -
rpmDebian A flaw was found in RPM's signature check functionality when reading a package file. This flaw... 7.0 High -
rpmDebian It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when... 7.8 High -
rpmDebian It was found that rpm did not properly handle RPM installations when a destination path was a... 7.3 High -
rpmDebian Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a... 10.0 High -
rpmDebian Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a... 7.6 High -
rpmDebian The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error... 4.3 Medium -
rpmDebian The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to... 6.8 Medium -
rpmDebian The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region... 6.8 Medium -
rpmDebian RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause... 6.8 Medium -
rpmDebian RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of... 9.3 High -
rpmDebian lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file... 7.2 High -
rpmDebian lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file... 7.2 High -
rpmDebian rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows... 5.8 Medium -
rpmDebian lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not... 7.2 High -
rpmDebian lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during... 7.2 High -
rpmDebian Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4... 5.4 Medium -
rpmDebian zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a... 7.5 High