Описание
Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 4.11.3-1.1 |
| esm-infra-legacy/trusty | released | 4.11.1-3ubuntu0.1 |
| lucid | ignored | end of life |
| precise | released | 4.9.1.1-1ubuntu0.3 |
| trusty | released | 4.11.1-3ubuntu0.1 |
| trusty/esm | released | 4.11.1-3ubuntu0.1 |
| upstream | released | 4.11.3-1.1 |
| utopic | released | 4.11.2-3ubuntu0.1 |
Показывать по
EPSS
10 Critical
CVSS2
Связанные уязвимости
Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
Integer overflow in RPM 4.12 and earlier allows remote attackers to ex ...
Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
EPSS
10 Critical
CVSS2