10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.384 Low
EPSS
Percentile
96.7%
The RPM Package Manager (RPM) is a powerful command line driven package
management system capable of installing, uninstalling, verifying, querying,
and updating software packages. Each software package consists of an
archive of files along with information about the package such as its
version, description, and other information.
It was found that RPM wrote file contents to the target installation
directory under a temporary name, and verified its cryptographic signature
only after the temporary file has been written completely. Under certain
conditions, the system interprets the unverified temporary file contents
and extracts commands from it. This could allow an attacker to modify
signed RPM files in such a way that they would execute code chosen by the
attacker during package installation. (CVE-2013-6435)
It was found that RPM could encounter an integer overflow, leading to a
stack-based buffer overflow, while parsing a crafted CPIO header in the
payload section of an RPM file. This could allow an attacker to modify
signed RPM files in such a way that they would execute code chosen by the
attacker during package installation. (CVE-2014-8118)
These issues were discovered by Florian Weimer of Red Hat Product Security.
All rpm users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. All running
applications linked against the RPM library must be restarted for this
update to take effect.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 7 | x86_64 | rpm-build | < 4.11.1-18.el7_0 | rpm-build-4.11.1-18.el7_0.x86_64.rpm |
RedHat | 7 | ppc | rpm-build-libs | < 4.11.1-18.el7_0 | rpm-build-libs-4.11.1-18.el7_0.ppc.rpm |
RedHat | 7 | x86_64 | rpm-libs | < 4.11.1-18.el7_0 | rpm-libs-4.11.1-18.el7_0.x86_64.rpm |
RedHat | 7 | i686 | rpm-build-libs | < 4.11.1-18.el7_0 | rpm-build-libs-4.11.1-18.el7_0.i686.rpm |
RedHat | 7 | ppc64 | rpm-debuginfo | < 4.11.1-18.el7_0 | rpm-debuginfo-4.11.1-18.el7_0.ppc64.rpm |
RedHat | 7 | ppc | rpm-debuginfo | < 4.11.1-18.el7_0 | rpm-debuginfo-4.11.1-18.el7_0.ppc.rpm |
RedHat | 7 | s390x | rpm | < 4.11.1-18.el7_0 | rpm-4.11.1-18.el7_0.s390x.rpm |
RedHat | 7 | s390x | rpm-devel | < 4.11.1-18.el7_0 | rpm-devel-4.11.1-18.el7_0.s390x.rpm |
RedHat | 7 | ppc64 | rpm-build | < 4.11.1-18.el7_0 | rpm-build-4.11.1-18.el7_0.ppc64.rpm |
RedHat | 7 | noarch | rpm-cron | < 4.11.1-18.el7_0 | rpm-cron-4.11.1-18.el7_0.noarch.rpm |