Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to (1) the regionSwab function, (2) the headerLoad function, and (3) multiple functions in rpmio/rpmpgp.c.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
rpm 代码注入漏洞
Vulnerability Description
rpm是一个强大的命令行驱动的软件包管理工具，用来安装、卸载、校验、查询和更新 Linux 系统上的软件包。 rpm 4.9.1.2之前版本存在代码注入漏洞，恶意用户可利用这些漏洞危害用户系统。
CVSS Information
N/A
Vulnerability Type
N/A