Vulnerability in Rpm
CVE-2014-8118
Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
EPSS: 0.076 (93.9th percentile) — read the EPSS interpretation.
Affected products
- Rpm — versions 1.2, 1.3, 1.3.1
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (vendor-advisory, x_refsource_MANDRIVA)
- secalert@redhat.com (vendor-advisory, x_refsource_GENTOO)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (vendor-advisory, x_refsource_MANDRIVA)
- secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)