CVE-2013-6435
Fixed in a distro release EPSS 8%
Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory.
Products: rpm, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rpm | 4.11.3-1.1 |
| Debian 13 | rpm | 4.11.3-1.1 |
| Debian 14 | rpm | 4.11.3-1.1 |
| Debian 6.0 | rpm | 4.8.1-6+squeeze2 |
| Debian 7 | rpm | 4.10.0-5+deb7u2 |
| Red Hat Enterprise Linux 5 | popt | 0:1.10.2.3-36.el5_11 |
| Red Hat Enterprise Linux 5 | rpm | 0:4.4.2.3-36.el5_11 |
| Red Hat Enterprise Linux 5 | rpm-apidocs | 0:4.4.2.3-36.el5_11 |
| Red Hat Enterprise Linux 5 | rpm-build | 0:4.4.2.3-36.el5_11 |
| Red Hat Enterprise Linux 5 | rpm-debuginfo | 0:4.4.2.3-36.el5_11 |
| Red Hat Enterprise Linux 5 | rpm-devel | 0:4.4.2.3-36.el5_11 |
| Red Hat Enterprise Linux 5 | rpm-libs | 0:4.4.2.3-36.el5_11 |
| Red Hat Enterprise Linux 5 | rpm-python | 0:4.4.2.3-36.el5_11 |
| Red Hat Enterprise Linux 6 | rpm | 0:4.8.0-38.el6_6 |
| Red Hat Enterprise Linux 6 | rpm-apidocs | 0:4.8.0-38.el6_6 |
| Red Hat Enterprise Linux 6 | rpm-build | 0:4.8.0-38.el6_6 |
| Red Hat Enterprise Linux 6 | rpm-cron | 0:4.8.0-38.el6_6 |
| Red Hat Enterprise Linux 6 | rpm-debuginfo | 0:4.8.0-38.el6_6 |
| Red Hat Enterprise Linux 6 | rpm-devel | 0:4.8.0-38.el6_6 |
| Red Hat Enterprise Linux 6 | rpm-libs | 0:4.8.0-38.el6_6 |
| Red Hat Enterprise Linux 6 | rpm-python | 0:4.8.0-38.el6_6 |
| Red Hat Enterprise Linux 7 | rpm | 0:4.11.1-18.el7_0 |
| Red Hat Enterprise Linux 7 | rpm-apidocs | 0:4.11.1-18.el7_0 |
| Red Hat Enterprise Linux 7 | rpm-build | 0:4.11.1-18.el7_0 |
| Red Hat Enterprise Linux 7 | rpm-build-libs | 0:4.11.1-18.el7_0 |
| Red Hat Enterprise Linux 7 | rpm-cron | 0:4.11.1-18.el7_0 |
| Red Hat Enterprise Linux 7 | rpm-debuginfo | 0:4.11.1-18.el7_0 |
| Red Hat Enterprise Linux 7 | rpm-devel | 0:4.11.1-18.el7_0 |
| Red Hat Enterprise Linux 7 | rpm-libs | 0:4.11.1-18.el7_0 |
| Red Hat Enterprise Linux 7 | rpm-python | 0:4.11.1-18.el7_0 |
| Red Hat Enterprise Linux 7 | rpm-sign | 0:4.11.1-18.el7_0 |
| Red Hat rhel eus 5.9 | popt | 0:1.10.2.3-34.el5_9 |
| Red Hat rhel eus 5.9 | rpm | 0:4.4.2.3-34.el5_9 |
| Red Hat rhel eus 5.9 | rpm-apidocs | 0:4.4.2.3-34.el5_9 |
| Red Hat rhel eus 5.9 | rpm-build | 0:4.4.2.3-34.el5_9 |
| Red Hat rhel eus 5.9 | rpm-debuginfo | 0:4.4.2.3-34.el5_9 |
| Red Hat rhel eus 5.9 | rpm-devel | 0:4.4.2.3-34.el5_9 |
| Red Hat rhel eus 5.9 | rpm-libs | 0:4.4.2.3-34.el5_9 |
| Red Hat rhel eus 5.9 | rpm-python | 0:4.4.2.3-34.el5_9 |
| Red Hat rhel eus 6.4 | rpm | 0:4.8.0-33.el6_4 |
| Red Hat rhel eus 6.4 | rpm-apidocs | 0:4.8.0-33.el6_4 |
| Red Hat rhel eus 6.4 | rpm-build | 0:4.8.0-33.el6_4 |
| Red Hat rhel eus 6.4 | rpm-cron | 0:4.8.0-33.el6_4 |
| Red Hat rhel eus 6.4 | rpm-debuginfo | 0:4.8.0-33.el6_4 |
| Red Hat rhel eus 6.4 | rpm-devel | 0:4.8.0-33.el6_4 |
| Red Hat rhel eus 6.4 | rpm-libs | 0:4.8.0-33.el6_4 |
| Red Hat rhel eus 6.4 | rpm-python | 0:4.8.0-33.el6_4 |
| Red Hat rhel eus 6.5 | rpm | 0:4.8.0-38.el6_5 |
| Red Hat rhel eus 6.5 | rpm-apidocs | 0:4.8.0-38.el6_5 |
| Red Hat rhel eus 6.5 | rpm-build | 0:4.8.0-38.el6_5 |
| Red Hat rhel eus 6.5 | rpm-cron | 0:4.8.0-38.el6_5 |
| Red Hat rhel eus 6.5 | rpm-debuginfo | 0:4.8.0-38.el6_5 |
| Red Hat rhel eus 6.5 | rpm-devel | 0:4.8.0-38.el6_5 |
| Red Hat rhel eus 6.5 | rpm-libs | 0:4.8.0-38.el6_5 |
| Red Hat rhel eus 6.5 | rpm-python | 0:4.8.0-38.el6_5 |
| Red Hat rhel mission critical 5.6 | popt | 0:1.10.2.3-24.el5_6 |
| Red Hat rhel mission critical 5.6 | rpm | 0:4.4.2.3-24.el5_6 |
| Red Hat rhel mission critical 5.6 | rpm-apidocs | 0:4.4.2.3-24.el5_6 |
| Red Hat rhel mission critical 5.6 | rpm-build | 0:4.4.2.3-24.el5_6 |
| Red Hat rhel mission critical 5.6 | rpm-debuginfo | 0:4.4.2.3-24.el5_6 |
| Red Hat rhel mission critical 5.6 | rpm-devel | 0:4.4.2.3-24.el5_6 |
| Red Hat rhel mission critical 5.6 | rpm-libs | 0:4.4.2.3-24.el5_6 |
| Red Hat rhel mission critical 5.6 | rpm-python | 0:4.4.2.3-24.el5_6 |
| Red Hat rhel mission critical 6.2 | rpm | 0:4.8.0-20.el6_2.1 |
| Red Hat rhel mission critical 6.2 | rpm-apidocs | 0:4.8.0-20.el6_2.1 |
| Red Hat rhel mission critical 6.2 | rpm-build | 0:4.8.0-20.el6_2.1 |
| Red Hat rhel mission critical 6.2 | rpm-cron | 0:4.8.0-20.el6_2.1 |
| Red Hat rhel mission critical 6.2 | rpm-debuginfo | 0:4.8.0-20.el6_2.1 |
| Red Hat rhel mission critical 6.2 | rpm-devel | 0:4.8.0-20.el6_2.1 |
| Red Hat rhel mission critical 6.2 | rpm-libs | 0:4.8.0-20.el6_2.1 |
| Red Hat rhel mission critical 6.2 | rpm-python | 0:4.8.0-20.el6_2.1 |
| Ubuntu 14.04 LTS | rpm | 4.11.1-3ubuntu0.1 |