Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-5466

Fixed in a distro release EPSS 4%

Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.

Published 2006-11-06 · CVE record · OSV

Products: rpm package_manager, ubuntu_linux

Distro releases

ReleasePackageFixed in
Debian 12rpm4.4.1-11
Debian 13rpm4.4.1-11
Debian 14rpm4.4.1-11