CVE-2011-3378 — Code Injection in RPM

CWE-94 — Code InjectionCWE-228 — Improper Handling of Syntactically Invalid StructureCWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer8 documents7 sources
Severity
9.3CRITICALNVD
EPSS
5.1%
top 10.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
RPMDebian RPM
Timeline
PublishedDec 24
Latest updateMay 17

Description

RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to (1) the regionSwab function, (2) the headerLoad function, and (3) multiple functions in rpmio/rpmpgp.c.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶debiandebian/rpm< rpm 4.9.1.2-1 (bookworm)
▶Debianrpm/rpm< 4.9.1.2-1+3
▶NVDrpm/rpm4.9.1.1+11

🔴Vulnerability Details

2
GHSA
GHSA-34ff-v8wx-w9f5: RPM 4↗2022-05-17
▶
OSV
CVE-2011-3378: RPM 4↗2011-12-24
▶

📋Vendor Advisories

3
Ubuntu
RPM vulnerabilities↗2013-01-17
▶
Red Hat
rpm: crashes and overflows on malformed header↗2011-09-27
▶
Debian
CVE-2011-3378: rpm - RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cau...↗2011
▶

💬Community

2
Bugzilla
CVE-2011-3378 rpm: crashes and overflows on malformed header [fedora-all]↗2011-10-03
▶
Bugzilla
CVE-2011-3378 rpm: crashes and overflows on malformed header↗2011-09-27
▶