You are here

U-003:RPM Package Manager security update

October 4, 2011 - 1:30pm

Addthis

PROBLEM:

A vulnerability was reported in RPM Package Manager. A remote user can cause arbitrary code to be executed on the target user's system.

PLATFORM:
 

Version(s): 4.9.1.1 and prior versions.

ABSTRACT:
 

RPM Package Manager Header Validation Flaws Let Remote Users Execute Arbitrary Code.
 

reference LINKS:
  
RPM Package Manager Advisory
RHSA-2011:1349-1
SecurityTracker Alert ID: 1026134
CVE-2011-3378

IMPACT ASSESSMENT:

Medium

Discussion:

A remote user can create a specially crafted RPM package that, when queried or installed by the target user, will trigger a buffer overflow or memory corruption error and execute arbitrary code on the target system. The code will run with the privileges of the target user.
The RPM Package Manager (RPM) is a command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.

Impact:
 

Multiple flaws were found in the way the RPM library parsed package headers. An attacker could create a specially-crafted RPM package that, when queried or installed, would cause rpm to crash or, potentially, execute arbitrary code. (CVE-2011-3378)

Solution:

Although an RPM package can, by design, execute arbitrary code when installed, this issue would allow a specially-crafted RPM package to execute arbitrary code before its digital signature has been verified.
All RPM users should upgrade to these updated packages, which contain a backported patch to correct these issues. All running applications linked against the RPM library must be restarted for this update to take effect.
RHN Updated packages
RHN Update

 

Addthis