Unscored severity · published Jun 8, 2010
CVE-2010-2199
lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in…
–
CVSS
0.3%
EPSS
No
On KEV
Description
lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to bypass intended access restrictions by creating a hard link to a vulnerable file that has a POSIX ACL, a related issue to CVE-2010-2059.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RP
Rpm · Rpm
1.2; 1.3; 1.3.1; 1.4; 1.4.2; 1.4.2/a; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2199
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2199
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=125517
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/59416
More from Rpm
7.8
CVE-2017-7500
It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an…
7.8
CVE-2017-7501
It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM
7.0
CVE-2021-20271
A flaw was found in RPM's signature check functionality when reading a package file
6.7
CVE-2021-35939
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created
6.7
CVE-2021-35938
A symbolic link issue was found in rpm