It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | May 15, 2025 |
| Gentoo Linux | — | Upgrade app-arch/rpm. | Nov 29, 2018 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rpm-pythonUpgrade rpmUpgrade rpm-signUpgrade rpm-develUpgrade rpm-libsUpgrade rpm-buildUpgrade rpm-build-libs | Nov 6, 2018 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rpm-pythonUpgrade rpm-develUpgrade rpm-buildUpgrade rpm-libsUpgrade rpm-signUpgrade rpm-build-libsUpgrade rpm | Feb 15, 2019 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rpm-build-libsUpgrade rpm-libsUpgrade rpm-develUpgrade rpm-pythonUpgrade rpm-buildUpgrade rpm-signUpgrade rpm | Jan 9, 2019 | Nov 22, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2017 |
| Suse | — | Upgrade rpm-buildUpgrade rpm-32bitUpgrade python3-rpmUpgrade rpm-develUpgrade rpm-pythonUpgrade rpm | Oct 23, 2018 | Nov 22, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 22, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub