CVE-2011-3378
Fixed in a distro release EPSS 6%
RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to (1) the regionSwab function, (2) the headerLoad function, and (3) multiple functions in rpmio/rpmpgp.c.
Products: rpm
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rpm | 4.9.1.2-1 |
| Debian 13 | rpm | 4.9.1.2-1 |
| Debian 14 | rpm | 4.9.1.2-1 |
| Red Hat Enterprise Linux 4 | popt | 0:1.9.1-35_nonptl.el4 |
| Red Hat Enterprise Linux 4 | rpm | 0:4.3.3-35_nonptl.el4 |
| Red Hat Enterprise Linux 4 | rpm-build | 0:4.3.3-35_nonptl.el4 |
| Red Hat Enterprise Linux 4 | rpm-debuginfo | 0:4.3.3-35_nonptl.el4 |
| Red Hat Enterprise Linux 4 | rpm-devel | 0:4.3.3-35_nonptl.el4 |
| Red Hat Enterprise Linux 4 | rpm-libs | 0:4.3.3-35_nonptl.el4 |
| Red Hat Enterprise Linux 4 | rpm-python | 0:4.3.3-35_nonptl.el4 |
| Red Hat Enterprise Linux 5 | popt | 0:1.10.2.3-22.el5_7.2 |
| Red Hat Enterprise Linux 5 | rpm | 0:4.4.2.3-22.el5_7.2 |
| Red Hat Enterprise Linux 5 | rpm-apidocs | 0:4.4.2.3-22.el5_7.2 |
| Red Hat Enterprise Linux 5 | rpm-build | 0:4.4.2.3-22.el5_7.2 |
| Red Hat Enterprise Linux 5 | rpm-debuginfo | 0:4.4.2.3-22.el5_7.2 |
| Red Hat Enterprise Linux 5 | rpm-devel | 0:4.4.2.3-22.el5_7.2 |
| Red Hat Enterprise Linux 5 | rpm-libs | 0:4.4.2.3-22.el5_7.2 |
| Red Hat Enterprise Linux 5 | rpm-python | 0:4.4.2.3-22.el5_7.2 |
| Red Hat Enterprise Linux 6 | rpm | 0:4.8.0-16.el6_1.1 |
| Red Hat Enterprise Linux 6 | rpm-apidocs | 0:4.8.0-16.el6_1.1 |
| Red Hat Enterprise Linux 6 | rpm-build | 0:4.8.0-16.el6_1.1 |
| Red Hat Enterprise Linux 6 | rpm-cron | 0:4.8.0-16.el6_1.1 |
| Red Hat Enterprise Linux 6 | rpm-debuginfo | 0:4.8.0-16.el6_1.1 |
| Red Hat Enterprise Linux 6 | rpm-devel | 0:4.8.0-16.el6_1.1 |
| Red Hat Enterprise Linux 6 | rpm-libs | 0:4.8.0-16.el6_1.1 |
| Red Hat Enterprise Linux 6 | rpm-python | 0:4.8.0-16.el6_1.1 |
| Red Hat rhel els 3 | popt | 0:1.8.2-35_nonptl |
| Red Hat rhel els 3 | rpm | 0:4.2.3-35_nonptl |
| Red Hat rhel els 3 | rpm-build | 0:4.2.3-35_nonptl |
| Red Hat rhel els 3 | rpm-debuginfo | 0:4.2.3-35_nonptl |
| Red Hat rhel els 3 | rpm-devel | 0:4.2.3-35_nonptl |
| Red Hat rhel els 3 | rpm-libs | 0:4.2.3-35_nonptl |
| Red Hat rhel els 3 | rpm-python | 0:4.2.3-35_nonptl |
| Red Hat rhel eus 6.0 | rpm | 0:4.8.0-12.el6_0.1 |
| Red Hat rhel eus 6.0 | rpm-apidocs | 0:4.8.0-12.el6_0.1 |
| Red Hat rhel eus 6.0 | rpm-build | 0:4.8.0-12.el6_0.1 |
| Red Hat rhel eus 6.0 | rpm-cron | 0:4.8.0-12.el6_0.1 |
| Red Hat rhel eus 6.0 | rpm-debuginfo | 0:4.8.0-12.el6_0.1 |
| Red Hat rhel eus 6.0 | rpm-devel | 0:4.8.0-12.el6_0.1 |
| Red Hat rhel eus 6.0 | rpm-libs | 0:4.8.0-12.el6_0.1 |
| Red Hat rhel eus 6.0 | rpm-python | 0:4.8.0-12.el6_0.1 |
| Red Hat rhel mission critical 5.3 | popt | 0:1.10.2.3-9.el5_3.2 |
| Red Hat rhel mission critical 5.3 | rpm | 0:4.4.2.3-9.el5_3.2 |
| Red Hat rhel mission critical 5.3 | rpm-apidocs | 0:4.4.2.3-9.el5_3.2 |
| Red Hat rhel mission critical 5.3 | rpm-build | 0:4.4.2.3-9.el5_3.2 |
| Red Hat rhel mission critical 5.3 | rpm-debuginfo | 0:4.4.2.3-9.el5_3.2 |
| Red Hat rhel mission critical 5.3 | rpm-devel | 0:4.4.2.3-9.el5_3.2 |
| Red Hat rhel mission critical 5.3 | rpm-libs | 0:4.4.2.3-9.el5_3.2 |
| Red Hat rhel mission critical 5.3 | rpm-python | 0:4.4.2.3-9.el5_3.2 |