RPM Package Manager 4.4.2
Approved changes feed: RSS · Atom
cpe:2.3:a:rpm:rpm:4.4.2:*:*:*:*:*:*:*
part: a version: 4.4.2 update: *
| Vendor | Rpm (c01bad82-b6fe-5fb6-8e3f-74052dbedf9d) |
|---|---|
| Product | Rpm (bbede3a4-0f4c-5ee3-924b-b067fd84e0a2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/rpm |
purl2cpe | 2026-06-01 10:18:00.541666 |
pkg:deb/ubuntu/rpm |
purl2cpe | 2026-06-01 10:18:00.541668 |
pkg:github/rpm-software-management/rpm |
purl2cpe | 2026-06-01 10:18:00.541669 |
pkg:gitlab/redhat/rpm |
purl2cpe | 2026-06-01 10:18:00.541670 |
pkg:rpm/rpm |
purl2cpe | 2026-06-01 10:18:00.541672 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-3378 |
vulnerable | 2026-06-08 04:59:25.178780 |
Details available
RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to (1) the regionSwab function, (2) the headerLoad function, and (3) multiple functions in rpmio/rpmpgp.c.
Published: 2011-12-24T19:00:00.000Z
Updated: 2024-08-06T23:29:56.869Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2199 |
vulnerable | 2026-06-08 04:54:12.114055 |
Details available
lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to bypass intended access restrictions by creating a hard link to a vulnerable file that has a POSIX ACL, a related issue to CVE-2010-2059.
Published: 2010-06-08T18:00:00.000Z
Updated: 2024-08-07T02:25:07.432Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2198 |
vulnerable | 2026-06-08 04:54:12.111821 |
Details available
lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to gain privileges or bypass intended access restrictions by creating a hard link to a vulnerable file that has (1) POSIX file capabilities or (2) SELinux context information, a related issue to CVE-2010-2059.
Published: 2010-06-08T18:00:00.000Z
Updated: 2024-09-16T23:01:58.409Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2197 |
vulnerable | 2026-06-08 04:54:12.101509 |
Details available
rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ;~ (semicolon tilde) sequence in a Name tag.
Published: 2010-06-08T18:00:00.000Z
Updated: 2024-08-07T02:25:06.997Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2059 |
vulnerable | 2026-06-08 04:54:11.459616 |
Details available
lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file.
Published: 2010-06-08T18:00:00.000Z
Updated: 2024-08-07T02:17:14.557Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.