CVE-2006-5466: Rpm Package Manager

Medium severity, CVSS 5.4. EPSS: 3.9% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.

Affected products

• Rpm Package Manager: version 4.4.8 only
• Ubuntu Ubuntu Linux: version 6.06_lts only; version 6.10 only

Published 2006-11-06. Last modified 2026-06-16.