The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an…

Description

The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature," which allows remote attackers to bypass RPM signature checks via a crafted package.

Scores

EPSS (exploitation in 30 days)

2.2% · top 17% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

• n/a
• CWE-255 (opens in a new tab)

Affected products

• n/a

  • affected n/a

References (8)

• https://bugzilla.novell.com/show_bug.cgi?id=796375 (opens in a new tab)x_refsource_MISCx_transferred
• 57138 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 51706 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• [oss-security] 20130103 Re: CVE Request -- rpm (X >= 4.10 and X < 3d74c43 commit): Signature checking function returned success on (possibly malicious ) rpm packages (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=3d74c43 (opens in a new tab)x_refsource_CONFIRMx_transferred
• USN-1694-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• rpm-security-bypass(80953) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• http://rpm.org/wiki/Releases/4.10.2 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Record last updated 6 Aug 2024, 21:21 UTC.