Lucene search

K
cvelistRedhatCVELIST:CVE-2013-6435
HistoryDec 16, 2014 - 6:00 p.m.

CVE-2013-6435

2014-12-1618:00:00
redhat
www.cve.org
8

AI Score

7.7

Confidence

High

EPSS

0.091

Percentile

94.7%

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory.