A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.

🗓️ 13 May 2021 07:00:00Reported by MicrosoftType

Flaw in RPM hdrblobInit() lets an attacker who can modify the rpmdb cause an out-of-bounds read, harming availability.

Reporter	Title	Published	Views	Family All 113
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities fixed in Cloud Pak for Automation components	19 Jan 202216:26	–	ibm
IBM Security Bulletins	Security Bulletin: Due to RPM, AIX is vulnerable to arbitrary code execution (CVE-2021-20271), RPM database corruption (CVE-2021-3421), and denial of service (CVE-2021-20266)	23 Sep 202216:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by multiple vulnerabilities in Red Hat Universal Base Image version 8.4-206.1626828523 and Binutils version 2.30-93	14 Mar 202220:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with Known Vulnerabilities	25 Apr 202214:44	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0007: rpm (ALINUX3-SA-2022:0007)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : rpm (ALSA-2021:4489)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : rpm (CESA-2021:4489)	11 Nov 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : rpm (EulerOS-SA-2021-1992)	28 Jun 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : rpm (EulerOS-SA-2021-2015)	30 Jun 202100:00	–	nessus

Vulners

Node

13 May 2021 07:00Current

7High risk

Vulners AI Score7

CVSS 24

CVSS 3.14.9

EPSS0.00063