CVE-2006-5466
Fixed in a distro release EPSS 4%
Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.
Products: rpm package_manager, ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rpm | 4.4.1-11 |
| Debian 13 | rpm | 4.4.1-11 |
| Debian 14 | rpm | 4.4.1-11 |