{"kind": "product", "path": "vulns/debian-14/rpm", "name": "rpm", "product": "rpm", "ecosystem": "Debian:14", "items": [{"id": "CVE-2026-103242", "noindex": false, "published": "2026-09-30T11:50:32.039Z", "modified": "2026-09-30T16:37:10.970Z", "cvss": 7.1, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "severity": "high", "epss": 0.00119, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-103242", "title": "Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag", "description": "A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv() to allocate a one-byte buffer and then write the tag's attacker-controlled, hex-decoded content — of attacker-chosen length — past the end of that allocation. This is reachable via rpm2cpio, rpm2archive, and rpm -qlvp on an untrusted package.", "references": ["https://access.redhat.com/security/cve/CVE-2026-103242", "https://bugzilla.redhat.com/show_bug.cgi?id=2543866", "https://nvd.nist.gov/vuln/detail/CVE-2026-103242"], "fixes": [], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-95520", "noindex": false, "published": "2026-09-29T11:02:06.457Z", "modified": "2026-09-29T13:19:42.202Z", "cvss": 7.1, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "severity": "high", "epss": 0.00119, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-95520", "title": "Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages", "description": "A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAG_LONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext() that shrinks a buffer allocation to one byte, after which the payload's independently-controlled cpio filesize field is used to write attacker-controlled data past the end of that allocation. This is reachable via rpm2cpio, rpm2archive, and rpm -qlvp on an  untrusted package.", "references": ["https://access.redhat.com/security/cve/CVE-2026-95520", "https://bugzilla.redhat.com/show_bug.cgi?id=2537809", "https://nvd.nist.gov/vuln/detail/CVE-2026-95520"], "fixes": [], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-95521", "noindex": false, "published": "2026-09-24T13:26:56.782Z", "modified": "2026-09-24T15:02:40.089Z", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00582, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-95521", "title": "Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm", "description": "A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. This allows arbitrary command execution as the invoking (typically non-root) user, simply by installing, rebuilding, or otherwise processing an untrusted .src.rpm.", "references": ["https://access.redhat.com/security/cve/CVE-2026-95521", "https://bugzilla.redhat.com/show_bug.cgi?id=2537812", "https://nvd.nist.gov/vuln/detail/CVE-2026-95521"], "fixes": [], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-95519", "noindex": false, "published": "2026-09-24T13:26:54.847Z", "modified": "2026-09-25T12:28:58.145Z", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00144, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-95519", "title": "Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)", "description": "A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using `rpm -q -p` or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened, allowing embedded shell commands to run with the privileges of the `rpm` process. Successful exploitation can lead to a full compromise of confidentiality, integrity, and availability for the affected account.", "references": ["https://access.redhat.com/security/cve/CVE-2026-95519", "https://bugzilla.redhat.com/show_bug.cgi?id=2470977", "https://nvd.nist.gov/vuln/detail/CVE-2026-95519"], "fixes": [], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-84838", "noindex": false, "published": "2026-09-02T15:13:02.577Z", "modified": "2026-10-14T02:31:35.535Z", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.01105, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-84838", "title": "Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()", "description": "A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell command strings. Successful exploitation requires user interaction, where a user or automated workflow invokes rpmuncompress on the malicious file, leading to high impact on the confidentiality, integrity, and availability of data accessible to the invoking user.", "references": ["https://access.redhat.com/errata/RHSA-2026:82378", "https://access.redhat.com/security/cve/CVE-2026-84838", "https://bugzilla.redhat.com/show_bug.cgi?id=2462222"], "fixes": [], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-84837", "noindex": false, "published": "2026-09-02T15:12:58.497Z", "modified": "2026-10-14T02:28:39.324Z", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.01303, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-84837", "title": "Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path", "description": "A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell metacharacters. This is particularly relevant in automated build or continuous integration (CI) workflows that ingest externally supplied artifact names. Successful exploitation allows for arbitrary command execution with the privileges of the build user, which could lead to information disclosure or disruption of the build environment.", "references": ["https://access.redhat.com/errata/RHSA-2026:82378", "https://access.redhat.com/security/cve/CVE-2026-84837", "https://bugzilla.redhat.com/show_bug.cgi?id=2478408"], "fixes": [], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-84233", "noindex": false, "published": "2026-09-01T14:53:45.586Z", "modified": "2026-10-02T13:59:45.622Z", "cvss": 7, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00194, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-84233", "title": "Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames", "description": "A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax. When a user or automated workflow invokes `rpmuncompress -x` on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary commands with the privileges of the invoking account, leading to a compromise of confidentiality, integrity, and availability.", "references": ["https://access.redhat.com/errata/RHSA-2026:66637", "https://access.redhat.com/security/cve/CVE-2026-84233", "https://bugzilla.redhat.com/show_bug.cgi?id=2478409"], "fixes": [], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-78367", "noindex": false, "published": "2026-08-24T13:48:52.103Z", "modified": "2026-10-14T02:28:34.256Z", "cvss": 7, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00199, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-78367", "title": "Rpm: rpmbuild gettarspec() crafted tar member name → macro injection", "description": "A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb).", "references": ["https://access.redhat.com/errata/RHSA-2026:82378", "https://access.redhat.com/security/cve/CVE-2026-78367", "https://bugzilla.redhat.com/show_bug.cgi?id=2521857"], "fixes": [], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-44605", "noindex": false, "published": "2026-08-05T17:29:27.189Z", "modified": "2026-10-16T11:28:42.957Z", "cvss": 5.5, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00178, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-44605", "title": "Rpm: heap buffer overflow in ndb slot table parsing", "description": "A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memory allocation. An attacker could leverage this to cause a denial of service, making the system unavailable.", "references": ["https://access.redhat.com/errata/RHSA-2026:33507", "https://access.redhat.com/security/cve/CVE-2026-44605", "https://bugzilla.redhat.com/show_bug.cgi?id=2482481"], "fixes": [], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-44604", "noindex": false, "published": "2026-05-28T05:59:20.978Z", "modified": "2026-09-01T14:17:21.482Z", "cvss": 7, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00567, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-44604", "title": "Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command", "description": "A command injection vulnerability was discovered in the `rpmuncompress` utility of RPM. When extracting certain archive formats (ZIP, 7z, GEM) to a specified destination directory, the tool inserts the archive's top-level folder name into a shell command without properly sanitizing it. A specially crafted archive containing shell metacharacters in its folder name can execute arbitrary commands as the user running the extraction.", "references": ["https://access.redhat.com/errata/RHSA-2026:28491", "https://access.redhat.com/security/cve/CVE-2026-44604", "https://bugzilla.redhat.com/show_bug.cgi?id=2460967"], "fixes": [], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2021-35939", "noindex": false, "published": "2022-08-26T00:00:00.000Z", "modified": "2024-08-04T00:40:47.449Z", "cvss": 6.7, "cvss_vector": "", "severity": "medium", "epss": 0.00508, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-35939", "title": "CVE-2021-35939", "description": "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "references": ["https://rpm.org/wiki/Releases/4.18.0", "https://github.com/rpm-software-management/rpm/pull/1919", "https://bugzilla.redhat.com/show_bug.cgi?id=1964129"], "fixes": ["4.18.0+dfsg-1"], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2021-35938", "noindex": false, "published": "2022-08-25T00:00:00.000Z", "modified": "2024-08-04T00:40:47.458Z", "cvss": 6.7, "cvss_vector": "", "severity": "medium", "epss": 0.00519, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-35938", "title": "CVE-2021-35938", "description": "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=1964114", "https://bugzilla.suse.com/show_bug.cgi?id=1157880", "https://access.redhat.com/security/cve/CVE-2021-35938"], "fixes": ["4.18.0+dfsg-1"], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2021-35937", "noindex": false, "published": "2022-08-25T00:00:00.000Z", "modified": "2024-08-04T00:40:47.361Z", "cvss": 6.4, "cvss_vector": "", "severity": "medium", "epss": 0.00325, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-35937", "title": "CVE-2021-35937", "description": "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "references": ["https://rpm.org/wiki/Releases/4.18.0", "https://bugzilla.redhat.com/show_bug.cgi?id=1964125", "https://access.redhat.com/security/cve/CVE-2021-35937"], "fixes": ["4.18.0+dfsg-1"], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2021-3521", "noindex": false, "published": "2022-08-22T00:00:00.000Z", "modified": "2024-08-03T17:01:07.975Z", "cvss": 4.7, "cvss_vector": "", "severity": "medium", "epss": 0.00325, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-3521", "title": "CVE-2021-3521", "description": "There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a \"binding signature.\" RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sourc", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=1941098", "https://access.redhat.com/security/cve/CVE-2021-3521", "https://github.com/rpm-software-management/rpm/pull/1795/"], "fixes": ["4.18.0+dfsg-1"], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2021-3421", "noindex": false, "published": "2021-05-19T13:40:58.000Z", "modified": "2024-08-03T16:53:17.462Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00646, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-3421", "title": "CVE-2021-3421", "description": "A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha.", "references": ["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YILPBTPSBRYL4POBI3F4YUSVPSOQNJBY/"], "fixes": ["4.16.1.2+dfsg1-1"], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2021-20266", "noindex": false, "published": "2021-04-30T11:22:49.000Z", "modified": "2024-08-03T17:37:23.124Z", "cvss": 4.9, "cvss_vector": "", "severity": "medium", "epss": 0.01639, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-20266", "title": "CVE-2021-20266", "description": "A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=1927741", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/"], "fixes": ["4.16.1.2+dfsg1-1"], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2021-20271", "noindex": false, "published": "2021-03-26T00:00:00.000Z", "modified": "2024-08-03T17:37:23.716Z", "cvss": 7, "cvss_vector": "", "severity": "high", "epss": 0.00772, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-20271", "title": "CVE-2021-20271", "description": "A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=1934125", "https://github.com/rpm-software-management/rpm/commit/d6a86b5e69e46cc283b1e06c92343319beb42e21", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/"], "fixes": ["4.16.1.2+dfsg1-1"], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2017-7500", "noindex": false, "published": "2018-08-13T17:00:00.000Z", "modified": "2024-08-05T16:04:11.858Z", "cvss": 7.3, "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00412, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2017-7500", "title": "CVE-2017-7500", "description": "It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory in which a subdirectory will be installed, could redirect that directory to an arbitrary location and gain root privilege.", "references": ["https://github.com/rpm-software-management/rpm/commit/c815822c8bdb138066ff58c624ae83e3a12ebfa9", "https://github.com/rpm-software-management/rpm/commit/f2d3be2a8741234faaa96f5fd05fdfdc75779a79", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7500"], "fixes": [], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2017-7501", "noindex": false, "published": "2017-11-22T22:00:00.000Z", "modified": "2024-09-17T00:02:20.679Z", "cvss": 7.8, "cvss_vector": "", "severity": "high", "epss": 0.00392, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2017-7501", "title": "CVE-2017-7501", "description": "It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.", "references": ["https://security.gentoo.org/glsa/201811-22", "https://github.com/rpm-software-management/rpm/commit/404ef011c300207cdb1e531670384564aae04bdc", "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"], "fixes": [], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}, {"id": "CVE-2014-8118", "noindex": false, "published": "2014-12-16T18:00:00.000Z", "modified": "2024-08-06T13:10:50.836Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": 0.0755, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2014-8118", "title": "CVE-2014-8118", "description": "Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.", "references": ["http://www.mandriva.com/security/advisories?name=MDVSA-2015:056", "https://security.gentoo.org/glsa/201811-22", "http://advisories.mageia.org/MGASA-2014-0529.html"], "fixes": ["4.11.3-1.1"], "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}]}], "total": 33, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "rpm", "path": "vulns/debian-14/rpm", "ecosystem": "Debian:14"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 2, "kev": 0}, "lastmod": "2026-10-16T11:28:42.957Z", "early_advisories": [], "license": "Подборку PatchFirst и наши дополнения (приоритеты, ранние предупреждения, тексты, сводки и агрегаты) можно свободно использовать для собственных целей, включая внутренние задачи бизнеса. Перепродажа, коммерческое распространение и массовое зеркалирование этой подборки или дополнений допускаются только по письменному соглашению с оператором. При любом использовании или публикации подборки или наших дополнений указывайте PatchFirst (https://ru.patchfirst.dev/vulns/) с этой ссылкой на страницу ленты своего региона. Исходные записи открытых источников остаются под их лицензиями и условиями. Эти условия не ограничивают ваши права на исходные данные, которые можно получить у источников напрямую.", "terms_url": "https://ru.patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://ru.patchfirst.dev/vulns/"}, "source_changes": "PatchFirst отбирает, нормализует и объединяет записи; могут добавляться сводки и переводы. Новости указываются ссылкой на первоисточник в самой записи.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Лицензии исходных баз различаются; см. каталог источников."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Оценки доступны свободно; запрашивается указание источника (FIRST EPSS, оценки подготовлены Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}