CVE-2013-6435

Published: Dec 16, 2014Modified: May 6, 2026

7.6

Vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 4.9 / Impact: 10.0

Source: NVD

Description

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory.

Affected (110)

Products: Rpm: Rpm · Debian: Debian Linux

1 product

1 product

Configuration A

109 vulnerable

Vulnerable Software	Affected Versions
Rpm Rpm	Up to 4.11.1
Rpm Rpm	Version 1.2
Rpm Rpm	Version 1.3.1
Rpm Rpm	Version 1.3
Rpm Rpm	Version 1.4.1
Rpm Rpm	Version 1.4.2
Rpm Rpm	Version 1.4.2/a
Rpm Rpm	Version 1.4.3
Rpm Rpm	Version 1.4.4
Rpm Rpm	Version 1.4.5
Rpm Rpm	Version 1.4.6
Rpm Rpm	Version 1.4.7
Rpm Rpm	Version 1.4
Rpm Rpm	Version 2.0.10
Rpm Rpm	Version 2.0.11
Rpm Rpm	Version 2.0.1
Rpm Rpm	Version 2.0.2
Rpm Rpm	Version 2.0.3
Rpm Rpm	Version 2.0.4
Rpm Rpm	Version 2.0.5
Rpm Rpm	Version 2.0.6
Rpm Rpm	Version 2.0.7
Rpm Rpm	Version 2.0.8
Rpm Rpm	Version 2.0.9
Rpm Rpm	Version 2.0
Rpm Rpm	Version 2.1.1
Rpm Rpm	Version 2.1.2
Rpm Rpm	Version 2.1
Rpm Rpm	Version 2.2.10
Rpm Rpm	Version 2.2.11
Rpm Rpm	Version 2.2.1
Rpm Rpm	Version 2.2.2
Rpm Rpm	Version 2.2.3.10
Rpm Rpm	Version 2.2.3.11
Rpm Rpm	Version 2.2.3
Rpm Rpm	Version 2.2.4
Rpm Rpm	Version 2.2.5
Rpm Rpm	Version 2.2.6
Rpm Rpm	Version 2.2.7
Rpm Rpm	Version 2.2.8
Rpm Rpm	Version 2.2.9
Rpm Rpm	Version 2.2
Rpm Rpm	Version 2.3.1
Rpm Rpm	Version 2.3.2
Rpm Rpm	Version 2.3.3
Rpm Rpm	Version 2.3.4
Rpm Rpm	Version 2.3.5
Rpm Rpm	Version 2.3.6
Rpm Rpm	Version 2.3.7
Rpm Rpm	Version 2.3.8
Rpm Rpm	Version 2.3.9
Rpm Rpm	Version 2.3
Rpm Rpm	Version 2.4.11
Rpm Rpm	Version 2.4.12
Rpm Rpm	Version 2.4.1
Rpm Rpm	Version 2.4.2
Rpm Rpm	Version 2.4.3
Rpm Rpm	Version 2.4.4
Rpm Rpm	Version 2.4.5
Rpm Rpm	Version 2.4.6
Rpm Rpm	Version 2.4.8
Rpm Rpm	Version 2.4.9
Rpm Rpm	Version 2.5.1
Rpm Rpm	Version 2.5.2
Rpm Rpm	Version 2.5.3
Rpm Rpm	Version 2.5.4
Rpm Rpm	Version 2.5.5
Rpm Rpm	Version 2.5.6
Rpm Rpm	Version 2.5
Rpm Rpm	Version 2.6.7
Rpm Rpm	Version 3.0.1
Rpm Rpm	Version 3.0.2
Rpm Rpm	Version 3.0.3
Rpm Rpm	Version 3.0.4
Rpm Rpm	Version 3.0.5
Rpm Rpm	Version 3.0.6
Rpm Rpm	Version 3.0
Rpm Rpm	Version 4.0.1
Rpm Rpm	Version 4.0.2
Rpm Rpm	Version 4.0.3
Rpm Rpm	Version 4.0.4
Rpm Rpm	Version 4.0.
Rpm Rpm	Version 4.10.0
Rpm Rpm	Version 4.10.1
Rpm Rpm	Version 4.10.2
Rpm Rpm	Version 4.1
Rpm Rpm	Version 4.3.3
Rpm Rpm	Version 4.4.2.1
Rpm Rpm	Version 4.4.2.2
Rpm Rpm	Version 4.4.2.3
Rpm Rpm	Version 4.5.90
Rpm Rpm	Version 4.6.0
Rpm Rpm	Version 4.6.0 rc1
Rpm Rpm	Version 4.6.0 rc2
Rpm Rpm	Version 4.6.0 rc3
Rpm Rpm	Version 4.6.0 rc4
Rpm Rpm	Version 4.6.1
Rpm Rpm	Version 4.7.0
Rpm Rpm	Version 4.7.1
Rpm Rpm	Version 4.7.2
Rpm Rpm	Version 4.8.0
Rpm Rpm	Version 4.8.1
Rpm Rpm	Version 4.9.0
Rpm Rpm	Version 4.9.0 alpha
Rpm Rpm	Version 4.9.0 beta1
Rpm Rpm	Version 4.9.0 rc1
Rpm Rpm	Version 4.9.1.1
Rpm Rpm	Version 4.9.1.2
Rpm Rpm	Version 4.9.1