Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

rpm rpm 1.4.2 a vulnerabilities and exploits

(subscribe to this query)
676
VMScore

CVE-2013-6435

Race condition in RPM 4.11.1 and previous versions allows remote malicious users to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d d...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 4.8.0Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 1.4.2/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.9.0Rpm Rpm 4.0.1Rpm Rpm 4.9.1.2Rpm Rpm 2.2.11
890
VMScore

CVE-2014-8118

Integer overflow in RPM 4.12 and previous versions allows remote malicious users to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 4.8.0Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 1.4.2/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.9.0Rpm Rpm 4.0.1Rpm Rpm 4.9.1.2Rpm Rpm 2.2.11
605
VMScore

CVE-2012-0060

RPM prior to 4.9.1.3 does not properly validate region tags, which allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 4.8.0Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 1.4.2/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm RpmRpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.9.0Rpm Rpm 4.0.1Rpm Rpm 2.2.11
605
VMScore

CVE-2012-0061

The headerLoad function in lib/header.c in RPM prior to 4.9.1.3 does not properly validate region tags, which allows user-assisted remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 4.8.0Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 1.4.2/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm RpmRpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.9.0Rpm Rpm 4.0.1Rpm Rpm 2.2.11
605
VMScore

CVE-2012-0815

The headerVerifyInfo function in lib/header.c in RPM prior to 4.9.1.3 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric ran...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 4.8.0Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 1.4.2/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm RpmRpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.9.0Rpm Rpm 4.0.1Rpm Rpm 2.2.11
516
VMScore

CVE-2010-2197

rpmbuild in RPM 4.8.0 and previous versions does not properly parse the syntax of spec files, which allows user-assisted remote malicious users to remove home directories via vectors involving a ;~ (semicolon tilde) sequence in a Name tag.
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 4.4.2Rpm Rpm 1.4.2/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm Rpm 2..4.10Rpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.0.1Rpm Rpm 2.2.11Rpm Rpm 4.0.4
641
VMScore

CVE-2010-2199

lib/fsm.c in RPM 4.8.0 and previous versions does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to bypass intended access restrictions...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 4.4.2Rpm Rpm 1.4.2/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm Rpm 2..4.10Rpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.0.1Rpm Rpm 2.2.11Rpm Rpm 4.0.4
641
VMScore

CVE-2010-2198

lib/fsm.c in RPM 4.8.0 and previous versions does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to gain privileges or bypass intended ...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 4.4.2Rpm Rpm 1.4.2/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm Rpm 2..4.10Rpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.0.1Rpm Rpm 2.2.11Rpm Rpm 4.0.4
641
VMScore

CVE-2005-4889

lib/fsm.c in RPM prior to 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file, a related issu...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 1.4.2/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm Rpm 2..4.10Rpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.0.1Rpm Rpm 2.2.11Rpm Rpm 4.0.4Rpm Rpm 2.2.1
641
VMScore

CVE-2010-2059

lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM prior to 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade, which might allow local users to gain privileges by creating a hard link t...
Rpm Rpm 2.3.5Rpm Rpm 4.4.2.1Rpm Rpm 1.4.3Rpm Rpm 3.0.1Rpm Rpm 4.1Rpm Rpm 2.2.3.11Rpm Rpm 2.4.4Rpm Rpm 2.3.8Rpm Rpm 2.0.6Rpm Rpm 1.4.4Rpm Rpm 4.4.2Rpm Rpm 1.4.2/aRpm Rpm 2.4.1Rpm Rpm 2.4.9Rpm Rpm 2.6.7Rpm Rpm 2..4.10Rpm Rpm 1.4Rpm Rpm 2.0.10Rpm Rpm 2.4.5Rpm Rpm 4.0.1Rpm Rpm 2.2.11Rpm Rpm 4.0.4
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-6280CVE-2024-5346CVE-2024-30078CVE-2022-45803CVE-2024-36886SQLCVE-2024-24553IMAPmemory leak
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook