7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.
Security Fix(es):
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
almalinux | 8 | x86_64 | python3-rpm | < 4.14.3-14.el8_4 | python3-rpm-4.14.3-14.el8_4.x86_64.rpm |
almalinux | 8 | x86_64 | rpm | < 4.14.3-14.el8_4 | rpm-4.14.3-14.el8_4.x86_64.rpm |
almalinux | 8 | noarch | rpm-apidocs | < 4.14.3-14.el8_4 | rpm-apidocs-4.14.3-14.el8_4.noarch.rpm |
almalinux | 8 | x86_64 | rpm-build | < 4.14.3-14.el8_4 | rpm-build-4.14.3-14.el8_4.x86_64.rpm |
almalinux | 8 | i686 | rpm-build-libs | < 4.14.3-14.el8_4 | rpm-build-libs-4.14.3-14.el8_4.i686.rpm |
almalinux | 8 | x86_64 | rpm-build-libs | < 4.14.3-14.el8_4 | rpm-build-libs-4.14.3-14.el8_4.x86_64.rpm |
almalinux | 8 | noarch | rpm-cron | < 4.14.3-14.el8_4 | rpm-cron-4.14.3-14.el8_4.noarch.rpm |
almalinux | 8 | i686 | rpm-devel | < 4.14.3-14.el8_4 | rpm-devel-4.14.3-14.el8_4.i686.rpm |
almalinux | 8 | x86_64 | rpm-devel | < 4.14.3-14.el8_4 | rpm-devel-4.14.3-14.el8_4.x86_64.rpm |
almalinux | 8 | i686 | rpm-libs | < 4.14.3-14.el8_4 | rpm-libs-4.14.3-14.el8_4.i686.rpm |
7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P