CVE-2013-6435

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to…

published December 16, 2014

CVSS
—
EPSS
8%
Percentile
94.5
In the wild
Unconfirmed
What it is

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07606 · 94.5th percentile
Published
2014-12-16T18:00Z
EPSS history
Timeline
  • 16 DEC 18:00Z
    Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to…
    cvelistv5