Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: RPM — GLSA-202210-22 Clear all filters
TI-2021-14394 CVE-2021-35939 · GHSA-prgv-w33h-5m73

Link following in RPM

Priority LOW 30

It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00508 Published 2022-08-26 Partial fix CWE-59
TI-2021-14393 CVE-2021-35938 · GHSA-83gm-5269-qr3v

Link following in RPM

Priority LOW 30

A symbolic link issue was found in rpm.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00519 Published 2022-08-25 Partial fix CWE-59
TI-2021-14392 CVE-2021-35937 · GHSA-63x9-9q4w-j636

Link following in RPM

Priority LOW 28

A race condition vulnerability was found in rpm.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00325 Published 2022-08-25 Partial fix CWE-59
TI-2021-02480 CVE-2021-3521 · GHSA-pr6x-p264-jrpq

Improper signature verification in RPM

Priority LOW 22

There is a flaw in RPM's signature functionality.

CVSS 3.1MEDIUM 4.7 Local No auth User interaction EPSS 0.00325 Published 2022-08-22 Partial fix CWE-347