Search for packages
| purl | pkg:deb/debian/rpm@4.8.1-6%2Bsqueeze1 |
| Next non-vulnerable version | 4.18.0+dfsg-1+deb12u1 |
| Latest non-vulnerable version | 4.18.0+dfsg-1+deb12u1 |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1gkq-3yfu-fke8
Aliases: CVE-2021-20266 |
A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability. |
Affected by 4 other vulnerabilities. |
|
VCID-bd69-cfzq-c7ed
Aliases: CVE-2021-3421 |
A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha. |
Affected by 4 other vulnerabilities. |
|
VCID-faq3-97ja-9kc2
Aliases: CVE-2014-8118 |
Affected by 6 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
|
VCID-r3dj-w6tw-rufb
Aliases: CVE-2013-6435 |
Affected by 6 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
|
VCID-shux-h5z9-hfap
Aliases: CVE-2012-6088 |
Affected by 3 other vulnerabilities. |
|
|
VCID-t7hy-4jyx-vqev
Aliases: CVE-2012-0815 |
Affected by 6 other vulnerabilities. |
|
|
VCID-tsdq-9jj9-duh5
Aliases: CVE-2012-0061 |
Affected by 6 other vulnerabilities. |
|
|
VCID-u2a5-3kdz-1kbm
Aliases: CVE-2011-3378 |
Affected by 6 other vulnerabilities. |
|
|
VCID-uktq-tttc-gygm
Aliases: CVE-2012-0060 |
Affected by 6 other vulnerabilities. |
|
|
VCID-y63j-ybs2-mfc9
Aliases: CVE-2021-20271 |
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability. |
Affected by 4 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-axb5-4uah-z7hb | rpm: fails to drop SUID/SGID bits on package removal |
CVE-2005-4889
|
| VCID-she7-1zqn-8fbu | rpm: rpmbuild does not properly parse syntax of spec files |
CVE-2010-2197
|
| VCID-ubtm-4xj4-qybr | rpm: fails to drop SUID/SGID bits on package upgrade |
CVE-2010-2059
|