Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

rpm rpm 4.4.2. vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2
CVE-2011-3378
RPM 4.4.x up to and including 4.9.x, probably prior to 4.9.1.2, allows remote malicious users to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is q...
Rpm Rpm 4.4.2.1Rpm Rpm 4.8.0Rpm Rpm 4.4.2Rpm Rpm 4.6.0Rpm Rpm 4.4.2.2Rpm Rpm 4.7.2Rpm Rpm 4.7.0Rpm Rpm 4.4.2.3Rpm Rpm 4.6.1Rpm Rpm 4.7.1Rpm RpmRpm Rpm 4.4.2.
7.2
CVSSv2
CVE-2005-4889
lib/fsm.c in RPM prior to 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file, a related issu...
Rpm Rpm 1.4.5Rpm Rpm 1.4.6Rpm Rpm 2.0.2Rpm Rpm 2.0.3Rpm Rpm 2.0.4Rpm Rpm 2.2.1Rpm Rpm 2.2.2Rpm Rpm 2.2.9Rpm Rpm 2.2.11Rpm Rpm 2.3.1Rpm Rpm 2.3.2Rpm Rpm 2.3.9Rpm Rpm 2.2.3.10Rpm Rpm 2.4.6Rpm Rpm 1.4.2Rpm Rpm 1.4.2\\/aRpm Rpm 1.3.1Rpm Rpm 1.2Rpm Rpm 2.0.7Rpm Rpm 2.0.8Rpm Rpm 2.2.5Rpm Rpm 2.2.6
7.2
CVSSv2
CVE-2010-2198
lib/fsm.c in RPM 4.8.0 and previous versions does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to gain privileges or bypass intended ...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 4.4.2Rpm Rpm 1.4.2\\/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm Rpm 2..4.10Rpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.0.1Rpm Rpm 2.2.11Rpm Rpm 4.0.4
7.2
CVSSv2
CVE-2010-2059
lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM prior to 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade, which might allow local users to gain privileges by creating a hard link t...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 4.4.2Rpm Rpm 1.4.2\\/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm Rpm 2..4.10Rpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.0.1Rpm Rpm 2.2.11Rpm Rpm 4.0.4
7.2
CVSSv2
CVE-2010-2199
lib/fsm.c in RPM 4.8.0 and previous versions does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to bypass intended access restrictions...
Rpm Rpm 1.4.3Rpm Rpm 1.4.4Rpm Rpm 2.0Rpm Rpm 2.0.1Rpm Rpm 1.4.5Rpm Rpm 1.4.6Rpm Rpm 2.0.2Rpm Rpm 2.0.3Rpm Rpm 2.2.1Rpm Rpm 2.2.2Rpm Rpm 2.2.9Rpm Rpm 2.2.11Rpm Rpm 2.3Rpm Rpm 2.3.1Rpm Rpm 2.3.9Rpm Rpm 2.2.3.10Rpm Rpm 2.4.6Rpm Rpm 2.6.7Rpm Rpm 2.5.2Rpm Rpm 2.5.3Rpm Rpm 3.0.4Rpm Rpm 3.0.5
5.8
CVSSv2
CVE-2010-2197
rpmbuild in RPM 4.8.0 and previous versions does not properly parse the syntax of spec files, which allows user-assisted remote malicious users to remove home directories via vectors involving a ;~ (semicolon tilde) sequence in a Name tag.
Rpm Rpm 1.4.2Rpm Rpm 1.3.1Rpm Rpm 1.2Rpm Rpm 2.0Rpm Rpm 1.4.3Rpm Rpm 1.4.4Rpm Rpm 2.0.1Rpm Rpm 2.0.2Rpm Rpm 2.0.9Rpm Rpm 2.0.10Rpm Rpm 2.2.7Rpm Rpm 2.2.8Rpm Rpm 2.2Rpm Rpm 2.3Rpm Rpm 2.3.7Rpm Rpm 2.3.8Rpm Rpm 2.4.4Rpm Rpm 2.4.5Rpm Rpm 2.5.1Rpm Rpm 2.5.2Rpm Rpm 3.0.2Rpm Rpm 3.0.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671unauthorizedCVE-2024-4776CVE-2024-3407CVE-2024-26026CVE-2024-32888wirelessCVE-2024-4656template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook