CRITICAL9.3
Уязвимость операционной системы Red Hat Enterprise Linux, позволяющая удаленному нарушителю нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
Severity:
Closed issues (10)
CRITICAL9.3
Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CMEDIUM5.8
rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ;~ (semicolon tilde) sequence in a Name tag.
CVSS 2.0MEDIUM 5.8
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:PHIGH7.2
lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to gain privileges or bypass intended access restrictions by creating a hard link to a vulnerable file that has (1) POSIX file capabilities or (2) SELinux context information, a related issue to CVE-2010-2059.
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:CReferences
- http://marc.info/?l=oss-security&m=127559059928131&w=2
- http://rpm.org/gitweb?p=rpm.git%3Ba=commit%3Bh=4d172a194addc49851e558ea390d3045894e3230
- http://secunia.com/advisories/40028
- http://www.openwall.com/lists/oss-security/2010/06/02/3
- http://www.openwall.com/lists/oss-security/2010/06/03/5
- http://www.openwall.com/lists/oss-security/2010/06/04/1
- http://www.osvdb.org/65144
- https://bugzilla.redhat.com/show_bug.cgi?id=598775
- http://marc.info/?l=oss-security&m=127559059928131&w=2
- http://rpm.org/gitweb?p=rpm.git%3Ba=commit%3Bh=4d172a194addc49851e558ea390d3045894e3230
- http://secunia.com/advisories/40028
- http://www.openwall.com/lists/oss-security/2010/06/02/3
- http://www.openwall.com/lists/oss-security/2010/06/03/5
- http://www.openwall.com/lists/oss-security/2010/06/04/1
- http://www.osvdb.org/65144
- https://bugzilla.redhat.com/show_bug.cgi?id=598775
HIGH7.2
lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to bypass intended access restrictions by creating a hard link to a vulnerable file that has a POSIX ACL, a related issue to CVE-2010-2059.
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:CMEDIUM6.8
RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html
- http://rhn.redhat.com/errata/RHSA-2012-0451.html
- http://rhn.redhat.com/errata/RHSA-2012-0531.html
- http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=e4eab2bc6d07cfd33f740071de7ddbb2fe2f4190
- http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=f23998251992b8ae25faf5113c42fee2c49c7f29
- http://rpm.org/wiki/Releases/4.9.1.3
- http://secunia.com/advisories/48651
- http://secunia.com/advisories/48716
- http://secunia.com/advisories/49110
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:056
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.osvdb.org/81010
- http://www.securityfocus.com/bid/52865
- http://www.securitytracker.com/id?1026882
- http://www.ubuntu.com/usn/USN-1695-1
- https://bugzilla.redhat.com/show_bug.cgi?id=744858
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74582
- https://hermes.opensuse.org/messages/14440932
- https://hermes.opensuse.org/messages/14441362
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html
- http://rhn.redhat.com/errata/RHSA-2012-0451.html
- http://rhn.redhat.com/errata/RHSA-2012-0531.html
- http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=e4eab2bc6d07cfd33f740071de7ddbb2fe2f4190
- http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=f23998251992b8ae25faf5113c42fee2c49c7f29
- http://rpm.org/wiki/Releases/4.9.1.3
- http://secunia.com/advisories/48651
- http://secunia.com/advisories/48716
- http://secunia.com/advisories/49110
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:056
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.osvdb.org/81010
- http://www.securityfocus.com/bid/52865
- http://www.securitytracker.com/id?1026882
- http://www.ubuntu.com/usn/USN-1695-1
- https://bugzilla.redhat.com/show_bug.cgi?id=744858
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74582
- https://hermes.opensuse.org/messages/14440932
- https://hermes.opensuse.org/messages/14441362
MEDIUM6.8
The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html
- http://rhn.redhat.com/errata/RHSA-2012-0451.html
- http://rhn.redhat.com/errata/RHSA-2012-0531.html
- http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=472e569562d4c90d7a298080e0052856aa7fa86b
- http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=858a328cd0f7d4bcd8500c78faaf00e4f8033df6
- http://rpm.org/wiki/Releases/4.9.1.3
- http://secunia.com/advisories/48651
- http://secunia.com/advisories/48716
- http://secunia.com/advisories/49110
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:056
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.osvdb.org/81010
- http://www.securityfocus.com/bid/52865
- http://www.securitytracker.com/id?1026882
- http://www.ubuntu.com/usn/USN-1695-1
- https://bugzilla.redhat.com/show_bug.cgi?id=798585
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74583
- https://hermes.opensuse.org/messages/14440932
- https://hermes.opensuse.org/messages/14441362
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html
- http://rhn.redhat.com/errata/RHSA-2012-0451.html
- http://rhn.redhat.com/errata/RHSA-2012-0531.html
- http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=472e569562d4c90d7a298080e0052856aa7fa86b
- http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=858a328cd0f7d4bcd8500c78faaf00e4f8033df6
- http://rpm.org/wiki/Releases/4.9.1.3
- http://secunia.com/advisories/48651
- http://secunia.com/advisories/48716
- http://secunia.com/advisories/49110
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:056
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.osvdb.org/81010
- http://www.securityfocus.com/bid/52865
- http://www.securitytracker.com/id?1026882
- http://www.ubuntu.com/usn/USN-1695-1
- https://bugzilla.redhat.com/show_bug.cgi?id=798585
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74583
- https://hermes.opensuse.org/messages/14440932
- https://hermes.opensuse.org/messages/14441362
MEDIUM6.8
The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html
- http://rhn.redhat.com/errata/RHSA-2012-0451.html
- http://rhn.redhat.com/errata/RHSA-2012-0531.html
- http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=472e569562d4c90d7a298080e0052856aa7fa86b
- http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=858a328cd0f7d4bcd8500c78faaf00e4f8033df6
- http://rpm.org/wiki/Releases/4.9.1.3
- http://secunia.com/advisories/48651
- http://secunia.com/advisories/48716
- http://secunia.com/advisories/49110
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:056
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.osvdb.org/81009
- http://www.securityfocus.com/bid/52865
- http://www.securitytracker.com/id?1026882
- http://www.ubuntu.com/usn/USN-1695-1
- https://bugzilla.redhat.com/show_bug.cgi?id=744104
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74581
- https://hermes.opensuse.org/messages/14440932
- https://hermes.opensuse.org/messages/14441362
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html
- http://rhn.redhat.com/errata/RHSA-2012-0451.html
- http://rhn.redhat.com/errata/RHSA-2012-0531.html
- http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=472e569562d4c90d7a298080e0052856aa7fa86b
- http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=858a328cd0f7d4bcd8500c78faaf00e4f8033df6
- http://rpm.org/wiki/Releases/4.9.1.3
- http://secunia.com/advisories/48651
- http://secunia.com/advisories/48716
- http://secunia.com/advisories/49110
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:056
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.osvdb.org/81009
- http://www.securityfocus.com/bid/52865
- http://www.securitytracker.com/id?1026882
- http://www.ubuntu.com/usn/USN-1695-1
- https://bugzilla.redhat.com/show_bug.cgi?id=744104
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74581
- https://hermes.opensuse.org/messages/14440932
- https://hermes.opensuse.org/messages/14441362
HIGH7.6
Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory.
CVSS 2.0HIGH 7.6
CVSS:2.0/AV:N/AC:H/Au:N/C:C/I:C/A:CReferences
- http://advisories.mageia.org/MGASA-2014-0529.html
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- http://rhn.redhat.com/errata/RHSA-2014-1974.html
- http://rhn.redhat.com/errata/RHSA-2014-1975.html
- http://rhn.redhat.com/errata/RHSA-2014-1976.html
- http://www.debian.org/security/2015/dsa-3129
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:251
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:056
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/71558
- https://bugzilla.redhat.com/show_bug.cgi?id=1039811
- https://security.gentoo.org/glsa/201811-22
- https://securityblog.redhat.com/2014/12/10/analysis-of-the-cve-2013-6435-flaw-in-rpm/
- http://advisories.mageia.org/MGASA-2014-0529.html
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- http://rhn.redhat.com/errata/RHSA-2014-1974.html
- http://rhn.redhat.com/errata/RHSA-2014-1975.html
- http://rhn.redhat.com/errata/RHSA-2014-1976.html
- http://www.debian.org/security/2015/dsa-3129
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:251
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:056
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/71558
- https://bugzilla.redhat.com/show_bug.cgi?id=1039811
- https://security.gentoo.org/glsa/201811-22
- https://securityblog.redhat.com/2014/12/10/analysis-of-the-cve-2013-6435-flaw-in-rpm/
CRITICAL10.0
Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://advisories.mageia.org/MGASA-2014-0529.html
- http://rhn.redhat.com/errata/RHSA-2014-1976.html
- http://www.debian.org/security/2015/dsa-3129
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:251
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:056
- https://security.gentoo.org/glsa/201811-22
- http://advisories.mageia.org/MGASA-2014-0529.html
- http://rhn.redhat.com/errata/RHSA-2014-1976.html
- http://www.debian.org/security/2015/dsa-3129
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:251
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:056
- https://security.gentoo.org/glsa/201811-22