CVE-2024-1929 | High | 7.5 | 2024-05-08 | Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a malicious user to impact Confidentiality and Integrity via Configu… |
CVE-2021-35939 | Medium | 6.7 | 2022-08-26 | It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created… |
CVE-2021-35938 | Medium | 6.7 | 2022-08-25 | A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user coul… |
CVE-2021-35937 | Medium | 6.4 | 2022-08-25 | A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-201… |
CVE-2021-3521 | Medium | 4.7 | 2022-08-22 | There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a "binding signature." RPM does not check the binding s… |
CVE-2021-3445 | High | 7.5 | 2021-05-19 | A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can… |
CVE-2021-3421 | Medium | 5.5 | 2021-05-19 | A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package… |
CVE-2021-20266 | Medium | 4.9 | 2021-04-30 | A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest thre… |
CVE-2021-20271 | High | 7.0 | 2021-03-26 | A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemin… |
CVE-2019-3817 | High | 7.5 | 2019-03-27 | A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application r… |
CVE-2017-7500 | High | 7.3 | 2018-08-13 | It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and per… |
CVE-2018-10897 | High | 8.1 | 2018-08-01 | A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an… |
CVE-2017-7501 | High | 7.8 | 2017-11-22 | It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a dir… |
CVE-2014-8118 | | | 2014-12-16 | Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, whi… |
CVE-2013-6435 | | | 2014-12-16 | Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to t… |
CVE-2012-6088 | | | 2013-01-18 | The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature,"… |
CVE-2012-0815 | | | 2012-06-04 | The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary… |
CVE-2012-0061 | | | 2012-06-04 | The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a de… |
CVE-2012-0060 | | | 2012-06-04 | RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary co… |
CVE-2011-3378 | | | 2011-12-24 | RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code… |
CVE-2010-2199 | | | 2010-06-08 | lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or delet… |
CVE-2010-2198 | | | 2010-06-08 | lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or delet… |
CVE-2010-2197 | | | 2010-06-08 | rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via… |
CVE-2010-2059 | | | 2010-06-08 | lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable file during replac… |
CVE-2005-4889 | | | 2010-06-08 | lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might all… |
CVE-2006-5466 | | | 2006-11-06 | Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, m… |