Log in Start free

Vulnerability · Published Aug 5, 2026 · Assigned by redhat

CVE-2026-44605Rpm: heap buffer overflow in ndb slot table parsing

Medium 5.5

In plain English

A medium-severity integer overflow in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 92.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memory allocation. An attacker could leverage this to cause a denial of service, making the system unavailable.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12rpmno fix listedDEBIAN-CVE-2026-44605
Debian:13rpmno fix listedDEBIAN-CVE-2026-44605
Debian:14rpmno fix listedDEBIAN-CVE-2026-44605
Ubuntu:22.04:LTSrpmno fix listedUBUNTU-CVE-2026-44605
Ubuntu:24.04:LTSrpmno fix listedUBUNTU-CVE-2026-44605
Ubuntu:25.10rpmno fix listedUBUNTU-CVE-2026-44605
Ubuntu:26.04:LTSrpmno fix listedUBUNTU-CVE-2026-44605
Ubuntu:26.10rpmno fix listedUBUNTU-CVE-2026-44605

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Hardened Images see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-190 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References