PT-2014-8414 · Rpm+5 · Rpm+5
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
RPM versions 4.12 and earlier
Description
The issue is caused by an integer overflow in RPM, allowing remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file. This triggers a stack-based buffer overflow.
Recommendations
For versions 4.12 and earlier, update to a version later than 4.12 to resolve the issue.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Rpm
Red Hat
Suse
Ubuntu