PatchFirst · Свежие уязвимости
За последние 30 дней в rpm опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 2
Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.