A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha.

🗓️ 04 Jun 2021 07:00:00Reported by MicrosoftType

Red Hat Package Manager read flaw can corrupt database via forged packages or compromised repositories, before four

Reporter	Title	Published	Views	Family All 128
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities fixed in Cloud Pak for Automation components	19 Jan 202216:26	–	ibm
IBM Security Bulletins	Security Bulletin: Due to RPM, AIX is vulnerable to arbitrary code execution (CVE-2021-20271), RPM database corruption (CVE-2021-3421), and denial of service (CVE-2021-20266)	23 Sep 202216:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by multiple vulnerabilities in Red Hat Universal Base Image version 8.4-206.1626828523 and Binutils version 2.30-93	14 Mar 202220:12	–	ibm
Tenable Nessus	Amazon Linux 2 : rpm (ALAS-2021-1689)	16 Jul 202100:00	–	nessus
Tenable Nessus	Amazon Linux AMI : rpm (ALAS-2021-1521)	13 Jul 202100:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0046: rpm (ALINUX3-SA-2021:0046)	14 May 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : rpm (EulerOS-SA-2021-1992)	28 Jun 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.1 : rpm (EulerOS-SA-2021-2186)	13 Jul 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.0 : rpm (EulerOS-SA-2021-2197)	13 Jul 202100:00	–	nessus

Vulners

Node

04 Jun 2021 07:00Current

7High risk

Vulners AI Score7

CVSS 24.3

CVSS 3.15.5

EPSS0.00177