Rpm
CVE-2021-20271
HIGH
Severity by source
AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.
AnalysisAI
A flaw was found in RPM's signature check functionality when reading a package file. Rated high severity (CVSS 7.0), this vulnerability is no authentication required.
Technical ContextAI
This vulnerability is classified under CWE-345. A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability. Affected products include: Rpm, Redhat Enterprise Linux, Fedoraproject Fedora, Starwindsoftware Starwind Virtual San.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in
Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose
The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service
It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. Rat
The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-
RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (c
A flaw was found in the RPM package in the read functionality. Rated medium severity (CVSS 5.5), this vulnerability is n
A flaw was found in RPM's hdrblobInit() in lib/header.c. Rated medium severity (CVSS 4.9), this vulnerability is remotel
The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today