Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature," which allows remote attackers to bypass RPM signature checks via a crafted package.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RPM 签名验证安全绕过漏洞
Vulnerability Description
Red Hat RPM（RPM Package Manager）是美国红帽（Red Hat）公司的一款命令行驱动的软件包管理器，它主要用于安装、卸载、验证、查询和升级计算机软件包。 RPM 4.10.2之前的4.10.x版本中的lib/package.c中的rpmpkgRead函数中存在漏洞，该漏洞源于在一定包含‘不可解析的签名’情况下返回错误的代码。通过特制的数据包，远程攻击者利用该漏洞绕过RPM签名检查。
CVSS Information
N/A
Vulnerability Type
N/A