flaw in the RPM package in the read functionality

🗓️ 07 Nov 2023 00:00:00Reported by Broadcom Security ResponseType

Flaw in RPM read functionality can corrupt the database via deceptive installs or repository compromise.

Reporter	Title	Published	Views	Family All 128
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities fixed in Cloud Pak for Automation components	19 Jan 202216:26	–	ibm
IBM Security Bulletins	Security Bulletin: Due to RPM, AIX is vulnerable to arbitrary code execution (CVE-2021-20271), RPM database corruption (CVE-2021-3421), and denial of service (CVE-2021-20266)	23 Sep 202216:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by multiple vulnerabilities in Red Hat Universal Base Image version 8.4-206.1626828523 and Binutils version 2.30-93	14 Mar 202220:12	–	ibm
Tenable Nessus	Amazon Linux 2 : rpm (ALAS-2021-1689)	16 Jul 202100:00	–	nessus
Tenable Nessus	Amazon Linux AMI : rpm (ALAS-2021-1521)	13 Jul 202100:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0046: rpm (ALINUX3-SA-2021:0046)	14 May 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : rpm (EulerOS-SA-2021-1992)	28 Jun 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.1 : rpm (EulerOS-SA-2021-2186)	13 Jul 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.0 : rpm (EulerOS-SA-2021-2197)	13 Jul 202100:00	–	nessus

Vulners

Node

07 Nov 2023 19:51Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.3

CVSS 3.15.5

EPSS0.00177