Skip to content
OpenAdvisories
Unscored DLA-140-1 5 CVEs

rpm - security update

Published Jan 28, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 rpm 4.8.1-6+squeeze2

Vulnerabilities 5

  • Unscored —

    RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (…

  • Unscored —

    The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user…

  • Unscored —

    The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of servic…

  • Unscored —

    Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose…

  • Unscored —

    Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in…