Vendor
Rpm
26 known vulnerabilities in products by Rpm, 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2018-10897 | The RPM Project Yum-utils:: Link Following | 8.8 | |
| High | CVE-2019-3817 | Libcomps: Use After Free | 7.5 | |
| High | CVE-2021-3445 | Libdnf: Improper Verification of Cryptographic Signature | 7.5 | |
| Not rated | CVE-2013-6435 | RPM Package Manager: Race Condition | — | |
| Not rated | CVE-2014-8118 | RPM Package Manager: Stack-Based Buffer Overflow | — | |
| Medium | CVE-2021-20266 | Rpm: Out-of-bounds Read | 4.9 | |
| Not rated | CVE-2011-3378 | RPM Package Manager: Memory Corruption | — | |
| Not rated | CVE-2012-0061 | RPM Package Manager: Denial of Service | — | |
| Not rated | CVE-2012-0060 | RPM Package Manager: Denial of Service | — | |
| Not rated | CVE-2012-0815 | RPM Package Manager: Denial of Service | — | |
| Not rated | CVE-2006-5466 | Rpm Package Manager: Heap-Based Buffer Overflow | — | |
| High | CVE-2021-20271 | Rpm: Insufficient Verification of Data Authenticity | 7.0 | |
| Not rated | CVE-2012-6088 | RPM Package Manager: security vulnerability | — | |
| Medium | CVE-2021-35938 | RPM: Link Following | 6.7 | |
| Medium | CVE-2021-35939 | RPM: Link Following | 6.7 | |
| Medium | CVE-2021-3421 | Rpm: Improper Verification of Cryptographic Signature | 5.5 | |
| High | CVE-2017-7501 | Red Hat Rpm: Link Following | 7.8 | |
| High | CVE-2017-7500 | Rpm: Link Following | 7.3 | |
| High | CVE-2024-1929 | Local Root Exploit via Configuration Dictionary | 7.5 | |
| Medium | CVE-2021-35937 | RPM: Link Following | 6.4 | |
| Not rated | CVE-2010-2197 | RPM Package Manager: security vulnerability | — | |
| Medium | CVE-2021-3521 | RPM: Improper Verification of Cryptographic Signature | 4.7 | |
| Not rated | CVE-2010-2059 | RPM Package Manager: Privilege Escalation | — | |
| Not rated | CVE-2010-2198 | RPM Package Manager: Privilege Escalation | — | |
| Not rated | CVE-2005-4889 | RPM Package Manager: Privilege Escalation | — |
Products
| RPM | 21 | 0 |