Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-6435HistoryDec 16, 2014 - 6:59 p.m.
CVE-2013-6435
2014-12-1618:59:00
Debian Security Bug Tracker
security-tracker.debian.org
8
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.091 Low
EPSS
Percentile
94.6%
Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | rpm | < 4.11.3-1.1 | rpm_4.11.3-1.1_all.deb |
| Debian | 11 | all | rpm | < 4.11.3-1.1 | rpm_4.11.3-1.1_all.deb |
| Debian | 10 | all | rpm | < 4.11.3-1.1 | rpm_4.11.3-1.1_all.deb |
| Debian | 999 | all | rpm | < 4.11.3-1.1 | rpm_4.11.3-1.1_all.deb |
| Debian | 13 | all | rpm | < 4.11.3-1.1 | rpm_4.11.3-1.1_all.deb |
Related
redhat
redhat
(RHSA-2014:1975) Important: rpm security update
2014-12-09 00:00:00
(RHSA-2014:1974) Important: rpm security update
2014-12-09 00:00:00
(RHSA-2014:1976) Important: rpm security update
2014-12-09 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:03:22
openvas
openvas
Oracle: Security Advisory (ELSA-2014-1974)
2015-10-06 00:00:00
Debian Security Advisory DSA 3129-1 (rpm - security update)
2015-01-15 00:00:00
Fedora Update for rpm FEDORA-2014-16838
2014-12-30 00:00:00
nessus
nessus
RHEL 5 / 6 : rpm (RHSA-2014:1975)
2014-12-10 00:00:00
OracleVM 3.3 : rpm (OVMSA-2014-0083)
2014-12-15 00:00:00
f5
f5
K16383 : Linux RPM vulnerability CVE-2013-6435
2015-09-11 00:00:00
SOL16383 - Linux RPM vulnerability CVE-2013-6435
2015-04-09 00:00:00
oraclelinux
oraclelinux
rpm security update
2014-12-09 00:00:00
rpm security update
2014-12-09 00:00:00
cve
cve
CVE-2013-6435
2014-12-16 18:59:00
ibm
ibm
prion
prion
Race condition
2014-12-16 18:59:00
centos
centos
popt, rpm security update
2014-12-09 20:01:37
rpm security update
2014-12-10 12:49:42
ubuntucve
ubuntucve
CVE-2013-6435
2014-12-16 00:00:00
osv
osv
rpm - security update
2015-01-15 00:00:00
rpm - security update
2015-01-28 00:00:00
mageia
mageia
Updated rpm packages fix security vulnerabilities
2014-12-14 17:10:39
amazon
amazon
Important: rpm
2014-12-09 07:34:00
fedora
fedora
[SECURITY] Fedora 20 Update: rpm-4.11.3-2.fc20
2014-12-29 09:57:18
[SECURITY] Fedora 21 Update: rpm-4.12.0.1-4.fc21
2014-12-17 04:46:22
ubuntu
ubuntu
RPM vulnerabilities
2015-01-19 00:00:00
suse
suse
Security update for rpm (important)
2015-01-22 18:04:56
Security update for popt (important)
2014-12-24 08:05:00
securityvulns
securityvulns
[ MDVSA-2014:251 ] rpm
2014-12-22 00:00:00
RPM security vulnerabilities
2014-12-22 00:00:00
debian
debian
[SECURITY] [DSA 3129-1] rpm security update
2015-01-15 21:20:35
[SECURITY] [DLA 140-1] rpm security update
2015-01-28 18:07:09
gentoo
gentoo
RPM: Multiple vulnerabilities
2018-11-28 00:00:00
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.091 Low
EPSS
Percentile
94.6%
Related for DEBIANCVE:CVE-2013-6435