Not rated
CVE-2021-20271 A flaw was found in RPM's signature check functionality when reading a package file
Description
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| rpm | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- github.com github.com
- FEDORA-2021-2383d950fd lists.fedoraproject.org
- FEDORA-2021-8d52a8a999 lists.fedoraproject.org
- FEDORA-2021-662680e477 lists.fedoraproject.org
- GLSA-202107-43 security.gentoo.org
- www.starwindsoftware.com www.starwindsoftware.com
Timeline
- Published
- Last modified
Other CVEs of rpm
The 7 CVEs of rpm →
CVE-2021-35939
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the…
Not rated
CVE-2021-35937
A race condition vulnerability was found in rpm
Not rated
CVE-2021-35938
A symbolic link issue was found in rpm
Not rated
CVE-2021-3521
There is a flaw in RPM's signature functionality
Not rated