Rpm CVE-2012-0815

A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. Rated high

Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a malicious user to impact Con

Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote

It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. Rat

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (c

A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. Rated high severity (CVSS 7

A flaw was found in RPM's signature check functionality when reading a package file. Rated high severity (CVSS 7.0), thi

A flaw was found in the RPM package in the read functionality. Rated medium severity (CVSS 5.5), this vulnerability is n

A flaw was found in RPM's hdrblobInit() in lib/header.c. Rated medium severity (CVSS 4.9), this vulnerability is remotel