It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | May 15, 2025 |
| Gentoo Linux | — | Upgrade app-arch/rpm. | Nov 29, 2018 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rpmUpgrade rpm-signUpgrade rpm-pythonUpgrade rpm-develUpgrade rpm-build-libsUpgrade rpm-libsUpgrade rpm-build | Nov 6, 2018 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rpm-signUpgrade rpm-build-libsUpgrade rpmUpgrade rpm-libsUpgrade rpm-buildUpgrade rpm-pythonUpgrade rpm-devel | Feb 15, 2019 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rpm-develUpgrade rpm-pythonUpgrade rpm-build-libsUpgrade rpm-libsUpgrade rpm-signUpgrade rpm-buildUpgrade rpm | Jan 9, 2019 | Nov 22, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2017 |
| Suse | — | Upgrade rpm-buildUpgrade rpm-32bitUpgrade python3-rpmUpgrade rpm-develUpgrade rpmUpgrade rpm-python | Oct 23, 2018 | Nov 22, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 22, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub