https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:56:36 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2017-7501 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2017-7501 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0305 certfr-2024-avi-0305 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0305 https://cve.radiocsirt.org/vuln/cnvd-2017-38270 cnvd-2017-38270 https://cve.radiocsirt.org/vuln/cnvd-2017-38270 https://cve.radiocsirt.org/vuln/euvd-2026-177236 EUVD-2026-177236 https://cve.radiocsirt.org/vuln/euvd-2026-177236 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7501 <p>It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.</p> <p>It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-7501 https://cve.radiocsirt.org/vuln/ghsa-3xgr-x5gv-64gh <p>It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.</p> <p>It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.</p> https://cve.radiocsirt.org/vuln/ghsa-3xgr-x5gv-64gh https://cve.radiocsirt.org/vuln/gsd-2017-7501 gsd-2017-7501 https://cve.radiocsirt.org/vuln/gsd-2017-7501 https://cve.radiocsirt.org/vuln/suse-su-2018:3286-1 <p>Security update for rpm</p> <p>Security update for rpm</p> https://cve.radiocsirt.org/vuln/suse-su-2018:3286-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7501 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: rpm, Ubuntu:Pro:16.04:LTS: rpm</p> <p>It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: rpm, Ubuntu:Pro:16.04:LTS: rpm</p> <p>It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7501 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0876 <p>Ein lokaler Angreifer kann eine Schwachstelle in RPM ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service Zustand herbeiführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in RPM ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service Zustand herbeiführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0876