Red Hat Redhat Package Manager vulnerabilities

2 CVEs affecting Red Hat Redhat Package Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-2204, published 2002-12-31.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2002-2204, published 2002-12-31. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it, which can allow remote attackers to make it appear that a…
• CVE-2001-0923, published 2001-10-25. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.