Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-8118
HistoryDec 16, 2014 - 12:00 a.m.

CVE-2014-8118

2014-12-1600:00:00
ubuntu.com
ubuntu.com
9

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.369 Low

EPSS

Percentile

97.1%

JSON

Integer overflow in RPM 4.12 and earlier allows remote attackers to execute
arbitrary code via a crafted CPIO header in the payload section of an RPM
file, which triggers a stack-based buffer overflow.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchrpm< 4.9.1.1-1ubuntu0.3UNKNOWN
ubuntu14.04noarchrpm< 4.11.1-3ubuntu0.1UNKNOWN
ubuntu14.10noarchrpm< 4.11.2-3ubuntu0.1UNKNOWN

Related

debiancve 1
prion 1
checkpoint_advisories 1
cve 1
nessus 15
suse 2
redhat 1
openvas 13
fedora 2
ibm 1
ubuntu 1
oraclelinux 1
securityvulns 2
centos 1
osv 2
amazon 1
mageia 1
debian 2
gentoo 1
debiancve
debiancve
CVE-2014-8118
2014-12-16 18:59:00
prion
prion
Integer overflow
2014-12-16 18:59:00
checkpoint_advisories
checkpoint_advisories
RPM Package Manager CPIO Header NameSize Integer Overflow (CVE-2014-8118)
2015-02-16 00:00:00
cve
cve
CVE-2014-8118
2014-12-16 18:59:00
nessus
nessus
Ubuntu 14.04 LTS : RPM vulnerabilities (USN-2479-1)
2015-01-20 00:00:00
openSUSE Security Update : python3-rpm / rpm / rpm-python (openSUSE-SU-2014:1716-1)
2014-12-29 00:00:00
Fedora 20 : rpm-4.11.3-2.fc20 (2014-16838)
2014-12-30 00:00:00
suse
suse
Security update for rpm (important)
2015-01-22 18:04:56
Security update for popt (important)
2014-12-24 08:05:00
redhat
redhat
(RHSA-2014:1976) Important: rpm security update
2014-12-09 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-458)
2015-09-08 00:00:00
Ubuntu: Security Advisory (USN-2479-1)
2015-01-23 00:00:00
Debian: Security Advisory (DSA-3129-1)
2015-01-14 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: rpm-4.11.3-2.fc20
2014-12-29 09:57:18
[SECURITY] Fedora 21 Update: rpm-4.12.0.1-4.fc21
2014-12-17 04:46:22
ibm
ibm
Security Bulletin: Vulnerabilities in rpm affect IBM Flex System Manager (FSM): (CVE-2013-6435, CVE-2014-8118)
2019-01-31 01:45:01
ubuntu
ubuntu
RPM vulnerabilities
2015-01-19 00:00:00
oraclelinux
oraclelinux
rpm security update
2014-12-09 00:00:00
securityvulns
securityvulns
[ MDVSA-2014:251 ] rpm
2014-12-22 00:00:00
RPM security vulnerabilities
2014-12-22 00:00:00
centos
centos
rpm security update
2014-12-10 12:49:42
osv
osv
rpm - security update
2015-01-15 00:00:00
rpm - security update
2015-01-28 00:00:00
amazon
amazon
Important: rpm
2014-12-09 07:34:00
mageia
mageia
Updated rpm packages fix security vulnerabilities
2014-12-14 17:10:39
debian
debian
[SECURITY] [DSA 3129-1] rpm security update
2015-01-15 21:20:35
[SECURITY] [DLA 140-1] rpm security update
2015-01-28 18:07:09
gentoo
gentoo
RPM: Multiple vulnerabilities
2018-11-28 00:00:00

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.369 Low

EPSS

Percentile

97.1%

JSON
Related for UB:CVE-2014-8118
debiancve1prion1checkpoint_advisories1cve1nessus15suse2redhat1openvas13fedora2ibm1ubuntu1oraclelinux1securityvulns2centos1osv2amazon1mageia1debian2gentoo1