Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-8118
10
HIGHCVSS v2
Published
December 16, 2014
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
rpm-software-management/rpm
GitHubThe RPM package manager
GitHubThe RPM package manager= 2.3.5, = 4.4.2.1, = 1.4.3, = 3.0.1, = 4.1, = 2.2.3.11, = 4.8.0, = 2.4.4, = 2.3.8, = 1.4, = 2.0.6, = 2.2.1, = 1.4.4, = 2.4.5, = 4.9.1.2, = 1.4.2, = 1.4.2/a, = 2.0.1, = 2.0.10, = 2.2.11, = 3.0.3, = 4.0.4, = 2.4.1, = 2.4.9, = 2.6.7, = 4.0.1, = 4.9.0, = 2.0, = 2.0.7, = 2.4.2, = 3.0.2, = 4.0.2, <= 4.12.0, = 1.2, = 2.0.11, = 2.0.2, = 2.1.1, = 2.2.3, = 2.3, = 2.5.5, = 2.5.6, = 3.0.5, = 4.10.0, = 4.10.1, = 4.6.0, = 4.8.1, = 2.0.8, = 2.2.8, = 2.4.3, = 3.0.4, = 4.7.2, = 4.9.1, = 4.4.2.2, = 1.3, = 1.4.5, = 2.1.2, = 2.2, = 2.3.2, = 2.4.8, = 4.0., = 4.3.3, = 1.4.1, = 1.4.7, = 2.0.5, = 2.2.10, = 2.2.5, = 2.2.6, = 2.3.4, = 2.4.12, = 2.5, = 2.5.1, = 4.0.3, = 2.1, = 2.2.3.10, = 2.2.9, = 2.3.9, = 2.4.6, = 2.5.4, = 3.0.6, = 2.0.9, = 2.2.2, = 2.2.7, = 2.3.6, = 2.3.7, = 2.5.2, = 2.5.3, = 4.4.2.3, = 4.5.90, = 4.7.1, = 4.9.1.1, = 4.6.1, = 4.7.0, = 1.3.1, = 1.4.6, = 2.0.3, = 2.0.4, = 2.2.4, = 2.3.1, = 2.3.3, = 2.4.11, = 3.0, = 4.10.2NVD