It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | May 15, 2025 |
| Gentoo Linux | — | Upgrade app-arch/rpm. | Nov 29, 2018 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rpmUpgrade rpm-pythonUpgrade rpm-signUpgrade rpm-libsUpgrade rpm-develUpgrade rpm-buildUpgrade rpm-build-libs | Nov 6, 2018 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rpm-buildUpgrade rpm-develUpgrade rpm-pythonUpgrade rpm-libsUpgrade rpm-build-libsUpgrade rpm-signUpgrade rpm | Feb 15, 2019 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rpm-develUpgrade rpm-libsUpgrade rpm-pythonUpgrade rpm-build-libsUpgrade rpm-signUpgrade rpm-buildUpgrade rpm | Jan 9, 2019 | Nov 22, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2017 |
| Suse | — | Upgrade rpm-buildUpgrade rpm-32bitUpgrade rpmUpgrade python3-rpmUpgrade rpm-pythonUpgrade rpm-devel | Oct 23, 2018 | Nov 22, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 22, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub