CVE-2026-44605
MEDIUMRpm: heap buffer overflow in ndb slot table parsing
Title source: cnaDescription
A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memory allocation. An attacker could leverage this to cause a denial of service, making the system unavailable.
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
x_refsource_redhat
RHSA-2026:33507
https://access.redhat.com/errata/RHSA-2026:33507
Vdb Entry, X_Refsource_Redhat vdb-entry
x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2026-44605
Issue Tracking, X_Refsource_Redhat issue-tracking
x_refsource_redhat
RHBZ#2482481
https://bugzilla.redhat.com/show_bug.cgi?id=2482481
Scores
CVSS v3
5.5
EPSS
0.0014
EPSS Percentile
3.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-190
Status
published
Products (6)
Red Hat/Red Hat Enterprise Linux 10
Red Hat/Red Hat Enterprise Linux 6
Red Hat/Red Hat Enterprise Linux 7
Red Hat/Red Hat Enterprise Linux 8
Red Hat/Red Hat Enterprise Linux 9
Red Hat/Red Hat Hardened Images
6.0.1-6.2.hum1
Published
Aug 05, 2026
Tracked Since
Aug 05, 2026