https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:54:13 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-650 certfr-2022-avi-650 https://cve.radiocsirt.org/vuln/certfr-2022-avi-650 https://cve.radiocsirt.org/vuln/cnvd-2018-17735 cnvd-2018-17735 https://cve.radiocsirt.org/vuln/cnvd-2018-17735 https://cve.radiocsirt.org/vuln/euvd-2026-74756 EUVD-2026-74756 https://cve.radiocsirt.org/vuln/euvd-2026-74756 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7500 <p>It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory in which a subdirectory will be installed, could redirect that directory to an arbitrary location and gain root privilege.</p> <p>It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory in which a subdirectory will be installed, could redirect that directory to an arbitrary location and gain root privilege.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-7500 https://cve.radiocsirt.org/vuln/ghsa-2jc3-8rq8-7x2x <p>It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory in which a subdirectory will be installed, could redirect that directory to an arbitrary location and gain root privilege.</p> <p>It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory in which a subdirectory will be installed, could redirect that directory to an arbitrary location and gain root privilege.</p> https://cve.radiocsirt.org/vuln/ghsa-2jc3-8rq8-7x2x https://cve.radiocsirt.org/vuln/gsd-2017-7500 gsd-2017-7500 https://cve.radiocsirt.org/vuln/gsd-2017-7500 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11305-1 <p>librpmbuild9-4.16.1.3-3.2 on GA media</p> <p>librpmbuild9-4.16.1.3-3.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11305-1 https://cve.radiocsirt.org/vuln/suse-su-2018:2073-1 <p>Security update for rpm</p> <p>Security update for rpm</p> https://cve.radiocsirt.org/vuln/suse-su-2018:2073-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7500 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: rpm, Ubuntu:Pro:16.04:LTS: rpm</p> <p>It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory in which a subdirectory will be installed, could redirect that directory to an arbitrary location and gain root privilege.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: rpm, Ubuntu:Pro:16.04:LTS: rpm</p> <p>It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory in which a subdirectory will be installed, could redirect that directory to an arbitrary location and gain root privilege.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7500 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0877 <p>Ein lokaler Angreifer kann eine Schwachstelle in RPM ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in RPM ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0877