Rpm: heap buffer overflow in ndb slot table parsing

...

Important: rpm

Issue Overview: A heap buffer overflow exists in RPM's NDB database backend lib/backend/ndb/rpmpkg.c due to unchecked 32-bit arithmetic when parsing the slot table. The slotnpages value is read directly from the on-disk NDB header and used in a 32-bit multiplication slotnpages PAGESIZE / SLOTSIZE...

rpm: heap buffer overflow in NDB slot table parsing

A flaw was found in the RPM Package Manager RPM. A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memor...