Unscored severity · published Jun 8, 2010
CVE-2010-2059
lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in…
–
CVSS
0.4%
EPSS
No
On KEV
Description
lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RP
Rpm · Rpm
through 4.4.2.3; 1.2; 1.3; 1.3.1; 1.4; 1.4.2; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2059
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2059
Patch
http://distrib-coffee.ipsl.jussieu.fr/pub/mirrors/rpm/files/rpm/rpm-4.4/rpm-4.4.3.tar.gz
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
lists.vmware.com
http://lists.vmware.com/pipermail/security-announce/2011/000126.html
marc.info
http://marc.info/?l=oss-security&m=127559059928131&w=2
rpm.org
http://rpm.org/gitweb?p=rpm.git%3Ba=commit%3Bh=ca2d6b2b484f1501eafdde02e1688409340d2383
More from Rpm
7.8
CVE-2017-7500
It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an…
7.8
CVE-2017-7501
It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM
7.0
CVE-2021-20271
A flaw was found in RPM's signature check functionality when reading a package file
6.7
CVE-2021-35939
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created
6.7
CVE-2021-35938
A symbolic link issue was found in rpm