Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

rpm rpm 1.4.6 vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv2
CVE-2005-4889
lib/fsm.c in RPM prior to 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file, a related issu...
Rpm Rpm 1.4.5Rpm Rpm 1.4.6Rpm Rpm 2.0.2Rpm Rpm 2.0.3Rpm Rpm 2.0.4Rpm Rpm 2.2.1Rpm Rpm 2.2.2Rpm Rpm 2.2.9Rpm Rpm 2.2.11Rpm Rpm 2.3.1Rpm Rpm 2.3.2Rpm Rpm 2.3.9Rpm Rpm 2.2.3.10Rpm Rpm 2.4.6Rpm Rpm 1.4.2Rpm Rpm 1.4.2\\/aRpm Rpm 1.3.1Rpm Rpm 1.2Rpm Rpm 2.0.7Rpm Rpm 2.0.8Rpm Rpm 2.2.5Rpm Rpm 2.2.6
7.6
CVSSv2
CVE-2013-6435
Race condition in RPM 4.11.1 and previous versions allows remote malicious users to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d d...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 4.8.0Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 1.4.2\\/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.9.0Rpm Rpm 4.0.1Rpm Rpm 4.9.1.2Rpm Rpm 2.2.11
10
CVSSv2
CVE-2014-8118
Integer overflow in RPM 4.12 and previous versions allows remote malicious users to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 4.8.0Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 1.4.2\\/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.9.0Rpm Rpm 4.0.1Rpm Rpm 4.9.1.2Rpm Rpm 2.2.11
6.8
CVSSv2
CVE-2012-0060
RPM prior to 4.9.1.3 does not properly validate region tags, which allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 4.8.0Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 1.4.2\\/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm RpmRpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.9.0Rpm Rpm 4.0.1Rpm Rpm 2.2.11
6.8
CVSSv2
CVE-2012-0061
The headerLoad function in lib/header.c in RPM prior to 4.9.1.3 does not properly validate region tags, which allows user-assisted remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 4.8.0Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 1.4.2\\/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm RpmRpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.9.0Rpm Rpm 4.0.1Rpm Rpm 2.2.11
6.8
CVSSv2
CVE-2012-0815
The headerVerifyInfo function in lib/header.c in RPM prior to 4.9.1.3 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric ran...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 4.8.0Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 1.4.2\\/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm RpmRpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.9.0Rpm Rpm 4.0.1Rpm Rpm 2.2.11
7.2
CVSSv2
CVE-2010-2059
lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM prior to 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade, which might allow local users to gain privileges by creating a hard link t...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 4.4.2Rpm Rpm 1.4.2\\/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm Rpm 2..4.10Rpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.0.1Rpm Rpm 2.2.11Rpm Rpm 4.0.4
5.8
CVSSv2
CVE-2010-2197
rpmbuild in RPM 4.8.0 and previous versions does not properly parse the syntax of spec files, which allows user-assisted remote malicious users to remove home directories via vectors involving a ;~ (semicolon tilde) sequence in a Name tag.
Rpm Rpm 1.4.2Rpm Rpm 1.3.1Rpm Rpm 1.2Rpm Rpm 2.0Rpm Rpm 1.4.3Rpm Rpm 1.4.4Rpm Rpm 2.0.1Rpm Rpm 2.0.2Rpm Rpm 2.0.9Rpm Rpm 2.0.10Rpm Rpm 2.2.7Rpm Rpm 2.2.8Rpm Rpm 2.2Rpm Rpm 2.3Rpm Rpm 2.3.7Rpm Rpm 2.3.8Rpm Rpm 2.4.4Rpm Rpm 2.4.5Rpm Rpm 2.5.1Rpm Rpm 2.5.2Rpm Rpm 3.0.2Rpm Rpm 3.0.3
7.2
CVSSv2
CVE-2010-2198
lib/fsm.c in RPM 4.8.0 and previous versions does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to gain privileges or bypass intended ...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 4.4.2Rpm Rpm 1.4.2\\/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm Rpm 2..4.10Rpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.0.1Rpm Rpm 2.2.11Rpm Rpm 4.0.4
7.2
CVSSv2
CVE-2010-2199
lib/fsm.c in RPM 4.8.0 and previous versions does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to bypass intended access restrictions...
Rpm Rpm 1.4.3Rpm Rpm 1.4.4Rpm Rpm 2.0Rpm Rpm 2.0.1Rpm Rpm 1.4.5Rpm Rpm 1.4.6Rpm Rpm 2.0.2Rpm Rpm 2.0.3Rpm Rpm 2.2.1Rpm Rpm 2.2.2Rpm Rpm 2.2.9Rpm Rpm 2.2.11Rpm Rpm 2.3Rpm Rpm 2.3.1Rpm Rpm 2.3.9Rpm Rpm 2.2.3.10Rpm Rpm 2.4.6Rpm Rpm 2.6.7Rpm Rpm 2.5.2Rpm Rpm 2.5.3Rpm Rpm 3.0.4Rpm Rpm 3.0.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook