CVE-2001-0923: Red Hat Redhat Package Manager

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.

Affected products

• Red Hat Redhat Package Manager: version 4.0.2-71 only; version 4.0.2-72 only

Published 2001-10-25. Last modified 2026-06-16.