CVE-2011-3378

RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to (1) the regionSwab function, (2) the headerLoad function, and (3) multiple functions in rpmio/rpmpgp.c.

• CWE-94

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691
• http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00002.html
• http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=11a7e5d95a8ca8c7d4eaff179094afd8bb74fc3f
• http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=a48f0e20cbe2ababc88b2fc52fb7a281d6fc1656
• http://rpm.org/wiki/Releases/4.9.1.2#SecurityVendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:143
• http://www.openwall.com/lists/oss-security/2011/09/27/3
• http://www.redhat.com/support/errata/RHSA-2011-1349.htmlVendor Advisory
• http://www.ubuntu.com/usn/USN-1695-1
• https://bugzilla.redhat.com/show_bug.cgi?id=741606
• https://bugzilla.redhat.com/show_bug.cgi?id=741612Exploit
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691
• http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00002.html
• http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=11a7e5d95a8ca8c7d4eaff179094afd8bb74fc3f
• http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=a48f0e20cbe2ababc88b2fc52fb7a281d6fc1656
• http://rpm.org/wiki/Releases/4.9.1.2#SecurityVendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:143
• http://www.openwall.com/lists/oss-security/2011/09/27/3
• http://www.redhat.com/support/errata/RHSA-2011-1349.htmlVendor Advisory
• http://www.ubuntu.com/usn/USN-1695-1
• https://bugzilla.redhat.com/show_bug.cgi?id=741606
• https://bugzilla.redhat.com/show_bug.cgi?id=741612Exploit

Published

Dec 24, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3372imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.…
• CVE-2011-3373Drupal Views Builk Operations (VBO) module 6.x-1.0 through 6…6.1
• CVE-2011-3374It was found that apt-key in apt, all versions, do not corre…3.7
• CVE-2011-3375Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 do…
• CVE-2011-3376org/apache/catalina/core/DefaultInstanceManager.java in Apac…
• CVE-2011-3377The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 an…
• CVE-2011-3379The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to …
• CVE-2011-3380Openswan 2.6.29 through 2.6.35 allows remote attackers to ca…
• CVE-2011-3381Cross-site request forgery (CSRF) vulnerability in Phorum be…
• CVE-2011-3382Cross-site scripting (XSS) vulnerability in Phorum before 5.…
• CVE-2011-3383Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FOR…
• CVE-2011-3384Cross-site scripting (XSS) vulnerability in the Sage add-on …