Threats tagged 'ghsa-h54x-hjr5-ww2x'

A command injection vulnerability exists in rpmuncompress, allowing a local attacker to execute arbitrary commands by processing specially crafted archive filenames containing unescaped shell metacharacters. Exploitation requires user interaction, such as invoking rpmuncompress on a malicious file, and can lead to high impact on confidentiality, integrity, and availability of data accessible to the user.