CVE-2014-8118: Buffer Overflow
Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8118?
CVE-2014-8118 is considered a critical vulnerability due to its potential to allow remote code execution via a crafted RPM file.
How do I fix CVE-2014-8118?
To mitigate CVE-2014-8118, upgrade RPM to at least version 4.12.1, which contains the necessary patches.
What affected software is associated with CVE-2014-8118?
CVE-2014-8118 affects various versions of RPM Package Manager up to 4.12.0 and several earlier versions.
What type of attacks can exploit CVE-2014-8118?
CVE-2014-8118 can be exploited by attackers through specially crafted RPM files that trigger a stack-based buffer overflow.
Is CVE-2014-8118 easy to exploit?
Exploitation of CVE-2014-8118 may be straightforward for attackers familiar with crafting malicious RPM files.