PatchFirst · Latest vulnerabilities
Vulnerabilities published for rpm in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory.
Check your installed stack and versions against the current vulnerability feeds.