Not rated
CVE-2021-3421 A flaw was found in the RPM package in the read functionality
Description
A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| rpm | Versions not published |
References
- FEDORA-2021-2383d950fd lists.fedoraproject.org
- FEDORA-2021-8d52a8a999 lists.fedoraproject.org
- FEDORA-2021-662680e477 lists.fedoraproject.org
- bugzilla.redhat.com bugzilla.redhat.com
- GLSA-202107-43 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of rpm
The 7 CVEs of rpm →
CVE-2021-35939
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the…
Not rated
CVE-2021-35937
A race condition vulnerability was found in rpm
Not rated
CVE-2021-35938
A symbolic link issue was found in rpm
Not rated
CVE-2021-3521
There is a flaw in RPM's signature functionality
Not rated