Описание
RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to (1) the regionSwab function, (2) the headerLoad function, and (3) multiple functions in rpmio/rpmpgp.c.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux Extended Update Support 5.3 | rpm | Affected | ||
| Red Hat Enterprise Linux Extended Update Support 5.6 | rpm | Affected | ||
| Red Hat Enterprise Linux 3 Extended Lifecycle Support | rpm | Fixed | RHSA-2011:1349 | 03.10.2011 |
| Red Hat Enterprise Linux 4 | rpm | Fixed | RHSA-2011:1349 | 03.10.2011 |
| Red Hat Enterprise Linux 5 | rpm | Fixed | RHSA-2011:1349 | 03.10.2011 |
| Red Hat Enterprise Linux 5.3 Long Life | rpm | Fixed | RHSA-2011:1349 | 03.10.2011 |
| Red Hat Enterprise Linux 6 | rpm | Fixed | RHSA-2011:1349 | 03.10.2011 |
| Red Hat Enterprise Linux 6.0 EUS - Server Only | rpm | Fixed | RHSA-2011:1349 | 03.10.2011 |
Показывать по
Дополнительная информация
Статус:
7.6 High
CVSS2
Связанные уязвимости
RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to (1) the regionSwab function, (2) the headerLoad function, and (3) multiple functions in rpmio/rpmpgp.c.
RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to (1) the regionSwab function, (2) the headerLoad function, and (3) multiple functions in rpmio/rpmpgp.c.
RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attack ...
RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to (1) the regionSwab function, (2) the headerLoad function, and (3) multiple functions in rpmio/rpmpgp.c.
7.6 High
CVSS2