rpm package
suse/python3-rpm&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5
pkg:rpm/suse/python3-rpm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-3421 | — | < 4.11.2-16.26.1 | 4.11.2-16.26.1 | May 19, 2021 | A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data | ||
| CVE-2021-20266 | — | < 4.11.2-16.26.1 | 4.11.2-16.26.1 | Apr 30, 2021 | A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability. | ||
| CVE-2021-20271 | — | < 4.11.2-16.26.1 | 4.11.2-16.26.1 | Mar 26, 2021 | A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highe |
- CVE-2021-3421May 19, 2021affected < 4.11.2-16.26.1fixed 4.11.2-16.26.1
A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data
- CVE-2021-20266Apr 30, 2021affected < 4.11.2-16.26.1fixed 4.11.2-16.26.1
A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.
- CVE-2021-20271Mar 26, 2021affected < 4.11.2-16.26.1fixed 4.11.2-16.26.1
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highe