Rpm vulnerabilities

Products

• Rpm 21

Newest

• fedora dnf5daemon-server, rpm dnf5 +1 more Local Root Exploit via Configuration Dictionary CVE-2024-1929 Fix available 7.5 HighMay 8, 2024
• red hat, inc. rpm, redhat enterprise linux +1 more It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only... CVE-2021-35939 Fix available 6.7 MediumAugust 26, 2022
• red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +2 more A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and... CVE-2021-35938 Fix available 6.7 MediumAugust 25, 2022
• red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +2 more A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to... CVE-2021-35937 Fix available 6.4 MediumAugust 25, 2022
• red hat, inc. rpm There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary... CVE-2021-3521 Fix available 4.7 MediumNovember 12, 2021
• microsoft libdnf, fedoraproject fedora, redhat enterprise linux +2 more A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This... CVE-2021-3445 Fix available 7.5 HighMay 19, 2021
• red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +2 more A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who... CVE-2021-3421 Fix available 5.5 MediumApril 2, 2021
• red hat, inc. rpm, fedoraproject fedora +1 more A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can... CVE-2021-20266 Fix available 4.9 MediumApril 2, 2021
• red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +1 more +3 more A flaw was found in RPM's signature check functionality when reading a package file. This flaw... CVE-2021-20271 Fix available 7.0 HighMarch 26, 2021
• libcomps A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees... CVE-2019-3817 Fix available 7.5 HighMarch 15, 2019
• rpm yum-utils, redhat enterprise linux desktop, enterprise linux server +3 more +5 more A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to... CVE-2018-10897 Fix available 8.8 HighAugust 1, 2018
• red hat, inc. rpm It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when... CVE-2017-7501 7.8 HighOctober 30, 2017
• [unknown] rpm It was found that rpm did not properly handle RPM installations when a destination path was a... CVE-2017-7500 Fix available 7.3 HighOctober 30, 2017
• rpm Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a... CVE-2014-8118 Fix available 10.0 HighDecember 14, 2014
• rpm, debian linux +1 more Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a... CVE-2013-6435 Fix available 7.6 HighDecember 14, 2014
• rpm The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error... CVE-2012-6088 Fix available 4.3 MediumJanuary 18, 2013
• rpm The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to... CVE-2012-0815 Fix available 6.8 MediumJune 4, 2012
• rpm The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region... CVE-2012-0061 Fix available 6.8 MediumJune 4, 2012
• rpm RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause... CVE-2012-0060 Fix available 6.8 MediumJune 4, 2012
• rpm RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of... CVE-2011-3378 Fix available 9.3 HighDecember 24, 2011
• rpm lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file... CVE-2010-2199 7.2 HighJune 8, 2010
• rpm lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file... CVE-2010-2198 7.2 HighJune 8, 2010
• rpm rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows... CVE-2010-2197 Fix available 5.8 MediumJune 8, 2010
• rpm lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not... CVE-2010-2059 Fix available 7.2 HighJune 8, 2010
• rpm lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during... CVE-2005-4889 Fix available 7.2 HighJune 8, 2010
• rpm package manager, ubuntu linux +1 more Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4... CVE-2006-5466 Fix available 5.4 MediumNovember 6, 2006