rpm package
opensuse/rpm-ndb&distro=openSUSE Leap 15.3
pkg:rpm/opensuse/rpm-ndb&distro=openSUSE%20Leap%2015.3
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-3421 | — | < 4.14.3-37.2 | 4.14.3-37.2 | May 19, 2021 | A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data | ||
| CVE-2021-20266 | — | < 4.14.3-37.2 | 4.14.3-37.2 | Apr 30, 2021 | A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability. | ||
| CVE-2021-20271 | — | < 4.14.3-37.2 | 4.14.3-37.2 | Mar 26, 2021 | A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highe |
- CVE-2021-3421May 19, 2021affected < 4.14.3-37.2fixed 4.14.3-37.2
A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data
- CVE-2021-20266Apr 30, 2021affected < 4.14.3-37.2fixed 4.14.3-37.2
A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.
- CVE-2021-20271Mar 26, 2021affected < 4.14.3-37.2fixed 4.14.3-37.2
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highe