NVD

Id
10030  
Name
CVE-2011-3378  
Description
RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to (1) the regionSwab function, (2) the headerLoad function, and (3) multiple functions in rpmio/rpmpgp.c.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-12-24  
Modified Date
2016-12-07  
Seq
2011-3378  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57525 10030 CVE-2011-3378 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691  View
57526 10030 CVE-2011-3378 openSUSE-SU-2011:1203  View
57527 10030 CVE-2011-3378 SUSE-SU-2011:1140  View
57528 10030 CVE-2011-3378 http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=11a7e5d95a8ca8c7d4eaff179094afd8bb74fc3f  View
57529 10030 CVE-2011-3378 http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=a48f0e20cbe2ababc88b2fc52fb7a281d6fc1656  View
57530 10030 CVE-2011-3378 http://rpm.org/wiki/Releases/4.9.1.2#Security  View
57531 10030 CVE-2011-3378 MDVSA-2011:143  View
57532 10030 CVE-2011-3378 [oss-security] 20110927 rpm/librpm/rpm-python memory corruption pre-verification  View
57533 10030 CVE-2011-3378 RHSA-2011:1349  View
57534 10030 CVE-2011-3378 USN-1695-1  View
57535 10030 CVE-2011-3378 https://bugzilla.redhat.com/show_bug.cgi?id=741606  View
57536 10030 CVE-2011-3378 https://bugzilla.redhat.com/show_bug.cgi?id=741612  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33284 JVNDB-2011-003524 RPM におけるサービス運用妨害 (メモリ破損) の脆弱性 RPM には、rpmio/rpmpgp.c の (1) regionSwab 関数、(2) headerLoad 関数、および (3) multiple 関数に関する処理に不備があるため、サービス運用妨害 (メモリ破損) 状態となる、および任意のコードを実行される脆弱性が存在します。 CVE-2011-3378 51285 CVE-2011-3378 10030 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003524.html 2011-12-24 2012-12-21 View