Lucene search

K
redosRedosROS-20240410-21
HistoryApr 10, 2024 - 12:00 a.m.

ROS-20240410-21

2024-04-1000:00:00
redos.red-soft.ru
3
rpm package manager
red hat enterprise linux
vulnerability
privilege escalation
race condition
signature verification
incorrect link definition
unix

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:M/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

35.8%

A vulnerability in the RPM Package Manager of Red Hat Enterprise Linux operating systems
is related to the lack of RPM signature verification of subsection binding before importing them. Exploitation
exploitation of the vulnerability could allow an attacker to escalate his privileges

A vulnerability in the RPM Package Manager of Red Hat Enterprise Linux operating systems is caused by a race condition.
is caused by a race condition. Exploitation of the vulnerability could allow an attacker to escalate privileges

Vulnerability in RPM Package Manager of Red Hat Enterprise Linux operating systems
is related to incorrect link definition before accessing a file. Exploitation of the vulnerability could allow
an attacker to escalate privileges

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64rpm<= 4.18.2-1UNKNOWN

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:M/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

35.8%