Non notée
CVE-2021-20271 A flaw was found in RPM's signature check functionality when reading a package file
Description
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| rpm | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- github.com github.com
- FEDORA-2021-2383d950fd lists.fedoraproject.org
- FEDORA-2021-8d52a8a999 lists.fedoraproject.org
- FEDORA-2021-662680e477 lists.fedoraproject.org
- GLSA-202107-43 security.gentoo.org
- www.starwindsoftware.com www.starwindsoftware.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de rpm
Les 7 CVE de rpm →
CVE-2021-35939
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the…
Non notée
CVE-2021-35937
A race condition vulnerability was found in rpm
Non notée
CVE-2021-35938
A symbolic link issue was found in rpm
Non notée
CVE-2021-3521
There is a flaw in RPM's signature functionality
Non notée