TI-2022-18602 CVE-2022-39224 · GHSA-88cv-mj24-8w3q
Arbitrary shell execution when extracting or listing files contained in a malicious rpm.
Priority HIGH 69
Arr-pm is an RPM reader/writer library written in Ruby.
Ruby-arr-pm Project
Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Ruby-arr-pm Project records in CISA KEVNo Ruby-arr-pm Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record in Ruby-arr-pm · all components