CVE-2006-5466

Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.

View graph Watch Export

CVSS v3.1

—

EPSS

3.67%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

2 relationships

Timeline

disclosure → media coverage

Nov 6, 2006

Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026