RP
Vendor
Rpm
26
CVEs
0
On KEV
0
New 30D
Products
RP7.8
Rpm
Rpm
21 CVEs0 on KEV0 new
DN8.4
Dnf5
Rpm
1 CVEs0 on KEV0 new
LI8.8
Libcomps
Rpm
1 CVEs0 on KEV0 new
LI7.5
Libdnf
Rpm
1 CVEs0 on KEV0 new
PM–
Package Manager
Rpm
1 CVEs0 on KEV0 new
YU8.1
Yum-utils
Rpm
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-1929 | DN Dnf5 Rpm | 8.4 | May 8 | Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a malicious user to impact Confidentiality and Integrity via Configuration Dictionary |
| CVE-2021-35939 | RP Rpm Rpm | 6.7 | Aug 26 | It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created |
| CVE-2021-35938 | RP Rpm Rpm | 6.7 | Aug 25 | A symbolic link issue was found in rpm |
| CVE-2021-35937 | RP Rpm Rpm | 6.4 | Aug 25 | A race condition vulnerability was found in rpm |
| CVE-2021-3521 | RP Rpm Rpm | 4.7 | Aug 22 | There is a flaw in RPM's signature functionality |
| CVE-2021-3445 | LI Libdnf Rpm | 7.5 | May 19 | A flaw was found in libdnf's signature verification functionality in versions before 0.60.1 |
| CVE-2021-3421 | RP Rpm Rpm | 5.5 | May 19 | A flaw was found in the RPM package in the read functionality |
| CVE-2021-20266 | RP Rpm Rpm | 4.9 | Apr 30 | A flaw was found in RPM's hdrblobInit() in lib/header.c |
| CVE-2021-20271 | RP Rpm Rpm | 7.0 | Mar 26 | A flaw was found in RPM's signature check functionality when reading a package file |
| CVE-2019-3817 | LI Libcomps Rpm | 8.8 | Mar 27 | A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged |
| CVE-2017-7500 | RP Rpm Rpm | 7.8 | Aug 13 | It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an… |
| CVE-2018-10897 | YU Yum-utils Rpm | 8.1 | Aug 1 | A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files |
| CVE-2017-7501 | RP Rpm Rpm | 7.8 | Nov 22 | It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM |
| CVE-2014-8118 | RP Rpm Rpm | – | Dec 16 | Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a… |
| CVE-2013-6435 | RP Rpm Rpm | – | Dec 16 | Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files… |
| CVE-2012-6088 | RP Rpm Rpm | – | Jan 18 | The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature," which allows remote… |
| CVE-2012-0815 | RP Rpm Rpm | – | Jun 4 | The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative… |
| CVE-2012-0061 | RP Rpm Rpm | – | Jun 4 | The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service… |
| CVE-2012-0060 | RP Rpm Rpm | – | Jun 4 | RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid… |
| CVE-2011-3378 | RP Rpm Rpm | – | Dec 24 | RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package… |
| CVE-2010-2199 | RP Rpm Rpm | – | Jun 8 | lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in… |
| CVE-2010-2198 | RP Rpm Rpm | – | Jun 8 | lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in… |
| CVE-2010-2197 | RP Rpm Rpm | – | Jun 8 | rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a… |
| CVE-2010-2059 | RP Rpm Rpm | – | Jun 8 | lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in… |
| CVE-2005-4889 | RP Rpm Rpm | – | Jun 8 | lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to… |
| CVE-2006-5466 | PM Package Manager Rpm | – | Nov 6 | Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow… |