https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T22:10:35.363322+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-361746 EUVD-2026-361746 2026-10-10T22:10:35.556358+00:00 EUVD-2026-361746 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44605 fkie_cve-2026-44605 2026-10-10T22:10:35.556402+00:00

A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memory allocation. An attacker could leverage this to cause a denial of service, making the system unavailable.

 https://cve.radiocsirt.org/vuln/ghsa-jgh7-mh2q-3476 GHSA-jgh7-mh2q-3476 2026-10-10T22:10:35.556448+00:00

A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memory allocation. An attacker could leverage this to cause a denial of service, making the system unavailable.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-44605 msrc_CVE-2026-44605 — Rpm: heap buffer overflow in ndb slot table parsing 2026-10-10T22:10:35.556466+00:00 msrc_CVE-2026-44605 https://cve.radiocsirt.org/vuln/oesa-2026-3099 OESA-2026-3099 — rpm security update 2026-10-10T22:10:35.556483+00:00

Affected: openEuler:24.03-LTS-SP3: rpm, openEuler:24.03-LTS-SP4: rpm, openEuler:20.03-LTS-SP4: rpm, openEuler:22.03-LTS-SP4: rpm, openEuler:24.03-LTS-SP1: rpm

The RPM Package Manager (RPM) is a powerful package management system capability as below Security Fix(es):

A heap-based buffer overflow vulnerability was found in RPM's NDB (New Database) backend in the lib/backend/ndb/rpmpkg.c file. This vulnerability is classified as critical and could affect confidentiality, integrity, and availability of the system.(CVE-2026-44605)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11193-1 openSUSE-SU-2026:11193-1 — librpmbuild10-4.20.1-8.1 on GA media 2026-10-10T22:10:35.556516+00:00

librpmbuild10-4.20.1-8.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:33507 RHSA-2026:33507 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-10T22:10:35.556534+00:00

rpm: heap buffer overflow in NDB slot table parsing

 https://cve.radiocsirt.org/vuln/suse-su-2026:23192-1 SUSE-SU-2026:23192-1 — Security update for rpm 2026-10-10T22:10:35.556551+00:00

Security update for rpm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44605 UBUNTU-CVE-2026-44605 2026-10-10T22:10:35.556565+00:00

Affected: Ubuntu:Pro:14.04:LTS: rpm, Ubuntu:Pro:16.04:LTS: rpm, Ubuntu:Pro:18.04:LTS: rpm, Ubuntu:Pro:20.04:LTS: rpm, Ubuntu:22.04:LTS: rpm, Ubuntu:24.04:LTS: rpm, Ubuntu:25.10: rpm, Ubuntu:26.04:LTS: rpm

A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memory allocation. An attacker could leverage this to cause a denial of service, making the system unavailable.