A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memory allocation. An attacker could leverage this to cause a denial of service, making the system unavailable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade rpm-plugin-syslog-debuginfoUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-buildUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-syslogUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpm-apidocsUpgrade rpm-debuginfoUpgrade rpm-plugin-audit-debuginfoUpgrade rpmUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-build-libsUpgrade rpm-plugin-imaUpgrade rpm-build-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-cronUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-develUpgrade rpm-plugin-fapolicydUpgrade rpm-sign-libs-debuginfoUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-sign-debuginfoUpgrade rpm-plugin-auditUpgrade rpm-libsUpgrade rpm-build-libs-debuginfoUpgrade rpm-signUpgrade python3-rpmUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-debugsourceUpgrade rpm-sign-libs | Aug 10, 2026 | Aug 5, 2026 |
| Redhat_linux | — | No solution exists | Sep 2, 2026 | May 28, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub