Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-202210-22
HistoryOct 31, 2022 - 12:00 a.m.

RPM: Multiple Vulnerabilities

2022-10-3100:00:00
Gentoo Foundation
security.gentoo.org
26
red hat package manager
vulnerabilities
upgrade

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

36.8%

JSON

Background

The Red Hat Package Manager (RPM) is a command line driven package management system capable of installing, uninstalling, verifying, querying, and updating computer software packages.

Description

Multiple vulnerabilities have been discovered in RPM. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All RPM users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-arch/rpm-4.18.0"
OSVersionArchitecturePackageVersionFilename
Gentooanyallapp-arch/rpm< 4.18.0UNKNOWN

Related

redos 1
osv 9
rocky 3
oraclelinux 3
nessus 45
redhat 55
almalinux 3
freebsd 1
openvas 20
cbl_mariner 8
nvd 4
redhatcve 4
cve 4
debiancve 4
alpinelinux 4
prion 4
ubuntucve 4
veracode 4
cvelist 4
mageia 1
photon 4
rosalinux 1
ibm 9
redos
redos
ROS-20240410-21
2024-04-10 00:00:00
osv
osv
Moderate: rpm security update
2024-02-01 00:00:00
Moderate: rpm security update
2024-01-25 00:00:00
Moderate: rpm security update
2024-02-12 20:17:16
rocky
rocky
rpm security update
2024-02-12 20:17:16
rpm security update
2022-02-02 04:36:50
rpm security update
2022-02-01 20:13:05
oraclelinux
oraclelinux
rpm security update
2024-02-02 00:00:00
rpm security update
2024-01-25 00:00:00
rpm security update
2022-02-02 00:00:00
nessus
nessus
RHEL 8 : rpm (RHSA-2024:0424)
2024-01-25 00:00:00
RHEL 9 : rpm (RHSA-2024:0463)
2024-01-25 00:00:00
RHEL 8 : rpm (RHSA-2024:0582)
2024-01-30 00:00:00
redhat
redhat
(RHSA-2024:0435) Moderate: rpm security update
2024-01-24 14:40:39
(RHSA-2024:0647) Moderate: rpm security update
2024-02-01 12:04:42
(RHSA-2024:0453) Moderate: rpm security update
2024-01-24 14:40:53
almalinux
almalinux
Moderate: rpm security update
2024-02-01 00:00:00
Moderate: rpm security update
2024-01-25 00:00:00
Moderate: rpm security update
2022-02-01 20:13:05
freebsd
freebsd
rpm4 -- Multiple Vulnerabilities
2022-08-22 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2023-1174)
2023-01-12 00:00:00
Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2022-2741)
2022-11-14 00:00:00
Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2023-1232)
2023-01-12 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-35939 affecting package rpm 4.14.2-15
2024-07-01 15:26:45
CVE-2021-35937 affecting package rpm for versions less than 4.18.0-1
2022-10-05 23:33:44
CVE-2021-35938 affecting package rpm for versions less than 4.18.0-1
2022-10-05 23:33:44
nvd
nvd
CVE-2021-35938
2022-08-25 20:15:09
CVE-2021-3521
2022-08-22 15:15:13
CVE-2021-35937
2022-08-25 20:15:09
redhatcve
redhatcve
CVE-2021-35938
2021-07-01 17:23:07
CVE-2021-3521
2021-09-29 15:51:36
CVE-2021-35937
2021-07-01 17:22:58
cve
cve
CVE-2021-35938
2022-08-25 20:15:09
CVE-2021-3521
2022-08-22 15:15:13
CVE-2021-35939
2022-08-26 16:15:08
debiancve
debiancve
CVE-2021-35938
2022-08-25 20:15:09
CVE-2021-3521
2022-08-22 15:15:13
CVE-2021-35937
2022-08-25 20:15:09
alpinelinux
alpinelinux
CVE-2021-35938
2022-08-25 20:15:09
CVE-2021-3521
2022-08-22 15:15:13
CVE-2021-35939
2022-08-26 16:15:08
prion
prion
Design/Logic Flaw
2022-08-25 20:15:00
Design/Logic Flaw
2022-08-22 15:15:00
Race condition
2022-08-25 20:15:00
ubuntucve
ubuntucve
CVE-2021-35938
2022-08-25 00:00:00
CVE-2021-3521
2022-08-22 00:00:00
CVE-2021-35939
2022-08-26 00:00:00
veracode
veracode
Privilege Escalation
2022-10-01 00:52:27
Insecure Signature
2022-03-08 23:52:39
Denial Of Service (DoS)
2022-10-01 00:52:29
cvelist
cvelist
CVE-2021-35938
2022-08-25 00:00:00
CVE-2021-3521
2022-08-22 00:00:00
CVE-2021-35937
2022-08-25 00:00:00
mageia
mageia
Updated rpm packages fix security vulnerability
2022-09-10 23:26:43
photon
photon
Moderate Photon OS Security Update - PHSA-2022-0243
2022-09-08 00:00:00
Moderate Photon OS Security Update - PHSA-2022-4.0-0243
2022-09-08 00:00:00
Critical Photon OS Security Update - PHSA-2022-0512
2022-09-06 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2380
2024-03-26 11:28:11
ibm
ibm
Security Bulletin: App Connect Enterprise Certified Container UBI updates
2024-03-07 14:53:54
Security Bulletin: IBM MQ Operator and IBM supplied MQ Advanced container images are vulnerable to multiple issues from Red Hat UBI packages and the IBM WebSphere Application Server Liberty
2022-05-16 08:18:44
Security Bulletin: IBM Observability with Instana (OnPrem) is affected by Multiple Security Vulnerabilities
2024-05-30 11:23:32

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

36.8%

JSON
Related for GLSA-202210-22
redos1osv9rocky3oraclelinux3nessus45redhat55almalinux3freebsd1openvas20cbl_mariner8nvd4redhatcve4cve4debiancve4alpinelinux4prion4ubuntucve4veracode4cvelist4mageia1photon4rosalinux1ibm9