Описание
Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | released | 4.4.1-5ubuntu2.1 |
| devel | released | 4.4.1-14build1 |
| edgy | released | 4.4.1-9.1ubuntu0.1 |
| feisty | released | 4.4.1-14build1 |
| upstream | needs-triage |
Показывать по
EPSS
5.4 Medium
CVSS2
Связанные уязвимости
Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.
Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.
Heap-based buffer overflow in the showQueryPackage function in librpm ...
Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
EPSS
5.4 Medium
CVSS2