Rpm: heap buffer overflow in ndb slot table parsing
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Red Hat | Red Hat Hardened Images | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 10 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 10 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 6 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — |
No data.
No data.
| Vendor | Product | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Redhat | Enterprise Linux |
|
||||||||||||
| Redhat | Hardened Images |
|
Vendor Workaround
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.178% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat openshift Ai
Redhat rhel Els |
|
| CPEs | cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9 |
cpe:/a:redhat:enterprise_linux:10 cpe:/a:redhat:enterprise_linux:8 cpe:/a:redhat:enterprise_linux:9 cpe:/a:redhat:openshift_ai cpe:/o:redhat:rhel_els:6 cpe:/o:redhat:rhel_els:7 |
| Vendors & Products |
Redhat openshift Ai
Redhat rhel Els |
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat hardened Images
|
|
| Vendors & Products |
Redhat hardened Images
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memory allocation. An attacker could leverage this to cause a denial of service, making the system unavailable. | |
| Title | Rpm: heap buffer overflow in ndb slot table parsing | |
| First Time appeared |
Redhat
Redhat enterprise Linux Redhat hummingbird |
|
| Weaknesses | CWE-190 | |
| CPEs | cpe:/a:redhat:hummingbird:1 cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9 |
|
| Vendors & Products |
Redhat
Redhat enterprise Linux Redhat hummingbird |
|
| References |
| |
| Metrics |
cvssV3_1
|