Описание
RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux Extended Update Support 5.3 | rpm | Affected | ||
| Red Hat Enterprise Linux 3 Extended Lifecycle Support | rpm | Fixed | RHSA-2012:0451 | 03.04.2012 |
| Red Hat Enterprise Linux 4 Extended Lifecycle Support | rpm | Fixed | RHSA-2012:0451 | 03.04.2012 |
| Red Hat Enterprise Linux 5 | rpm | Fixed | RHSA-2012:0451 | 03.04.2012 |
| Red Hat Enterprise Linux 5.3 Long Life | rpm | Fixed | RHSA-2012:0451 | 03.04.2012 |
| Red Hat Enterprise Linux 5.6 EUS - Server Only | rpm | Fixed | RHSA-2012:0451 | 03.04.2012 |
| Red Hat Enterprise Linux 6 | rpm | Fixed | RHSA-2012:0451 | 03.04.2012 |
| Red Hat Enterprise Linux 6.0 EUS - Server Only | rpm | Fixed | RHSA-2012:0451 | 03.04.2012 |
| Red Hat Enterprise Linux 6.1 EUS - Server Only | rpm | Fixed | RHSA-2012:0451 | 03.04.2012 |
Показывать по
Дополнительная информация
Статус:
7.6 High
CVSS2
Связанные уязвимости
RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.
RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.
RPM before 4.9.1.3 does not properly validate region tags, which allow ...
RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.
7.6 High
CVSS2