Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2022-2023 and is owned by Tenable, Inc. or an Affiliate thereof.ROCKY_LINUX_RLSA-2021-2574.NASL
HistoryFeb 09, 2022 - 12:00 a.m.

Rocky Linux 8 : rpm (RLSA-2021:2574)

2022-02-0900:00:00
This script is Copyright (C) 2022-2023 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
7

6.9 Medium

AI Score

Confidence

High

JSON

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:2574 advisory.

  • A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha. (CVE-2021-3421)

  • A flaw was found in RPM’s signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability. (CVE-2021-20271)

Note that Nessus has not tested for this issue but has instead relied only on the application’s self-reported version number.

#%NASL_MIN_LEVEL 70300
##
# (C) Tenable Network Security, Inc.
#
# The package checks in this plugin were extracted from
# Rocky Linux Security Advisory RLSA-2021:2574.
##

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(157797);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/11/07");

  script_cve_id("CVE-2021-3421", "CVE-2021-20271");
  script_xref(name:"RLSA", value:"2021:2574");

  script_name(english:"Rocky Linux 8 : rpm (RLSA-2021:2574)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Rocky Linux host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the
RLSA-2021:2574 advisory.

  - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can
    convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM
    database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects
    RPM versions before 4.17.0-alpha. (CVE-2021-3421)

  - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an
    attacker who can convince a victim to install a seemingly verifiable package, whose signature header was
    modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is
    to data integrity, confidentiality, and system availability. (CVE-2021-20271)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://errata.rockylinux.org/RLSA-2021:2574");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=1934125");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2021-20271");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2021/03/22");
  script_set_attribute(attribute:"patch_publication_date", value:"2021/07/22");
  script_set_attribute(attribute:"plugin_publication_date", value:"2022/02/09");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:python3-rpm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:python3-rpm-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-apidocs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-build");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-build-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-build-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-build-libs-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-cron");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-devel-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-libs-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-plugin-fapolicyd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-plugin-fapolicyd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-plugin-ima");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-plugin-ima-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-plugin-prioreset");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-plugin-prioreset-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-plugin-selinux");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-plugin-selinux-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-plugin-syslog");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-plugin-syslog-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-plugin-systemd-inhibit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-plugin-systemd-inhibit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-sign");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:rocky:linux:rpm-sign-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:rocky:linux:8");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Rocky Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2022-2023 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RockyLinux/release", "Host/RockyLinux/rpm-list", "Host/cpu");

  exit(0);
}


include('rpm.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/RockyLinux/release');
if (isnull(os_release) || 'Rocky Linux' >!< os_release) audit(AUDIT_OS_NOT, 'Rocky Linux');
var os_ver = pregmatch(pattern: "Rocky(?: Linux)? release ([0-9]+(\.[0-9]+)?)", string:os_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'Rocky Linux');
os_ver = os_ver[1];
if (! preg(pattern:"^8([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, 'Rocky Linux 8.x', 'Rocky Linux ' + os_ver);

if (!get_kb_item('Host/RockyLinux/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Rocky Linux', cpu);

var pkgs = [
    {'reference':'python3-rpm-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'python3-rpm-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'python3-rpm-debuginfo-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'python3-rpm-debuginfo-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-apidocs-4.14.3-14.el8_4', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-build-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-build-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-build-debuginfo-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-build-debuginfo-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-build-libs-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-build-libs-4.14.3-14.el8_4', 'cpu':'i686', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-build-libs-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-build-libs-debuginfo-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-build-libs-debuginfo-4.14.3-14.el8_4', 'cpu':'i686', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-build-libs-debuginfo-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-cron-4.14.3-14.el8_4', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-debuginfo-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-debuginfo-4.14.3-14.el8_4', 'cpu':'i686', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-debuginfo-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-debugsource-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-debugsource-4.14.3-14.el8_4', 'cpu':'i686', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-debugsource-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-devel-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-devel-4.14.3-14.el8_4', 'cpu':'i686', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-devel-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-devel-debuginfo-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-devel-debuginfo-4.14.3-14.el8_4', 'cpu':'i686', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-devel-debuginfo-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-libs-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-libs-4.14.3-14.el8_4', 'cpu':'i686', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-libs-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-libs-debuginfo-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-libs-debuginfo-4.14.3-14.el8_4', 'cpu':'i686', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-libs-debuginfo-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-fapolicyd-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-fapolicyd-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-fapolicyd-debuginfo-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-fapolicyd-debuginfo-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-ima-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-ima-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-ima-debuginfo-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-ima-debuginfo-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-prioreset-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-prioreset-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-prioreset-debuginfo-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-prioreset-debuginfo-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-selinux-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-selinux-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-selinux-debuginfo-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-selinux-debuginfo-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-syslog-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-syslog-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-syslog-debuginfo-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-syslog-debuginfo-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-systemd-inhibit-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-systemd-inhibit-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-systemd-inhibit-debuginfo-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-plugin-systemd-inhibit-debuginfo-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-sign-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-sign-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-sign-debuginfo-4.14.3-14.el8_4', 'cpu':'aarch64', 'release':'8', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'rpm-sign-debuginfo-4.14.3-14.el8_4', 'cpu':'x86_64', 'release':'8', 'rpm_spec_vers_cmp':TRUE}
];

var flag = 0;
foreach var package_array ( pkgs ) {
  var reference = NULL;
  var _release = NULL;
  var sp = NULL;
  var _cpu = NULL;
  var el_string = NULL;
  var rpm_spec_vers_cmp = NULL;
  var epoch = NULL;
  var allowmaj = NULL;
  var exists_check = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) _release = 'Rocky-' + package_array['release'];
  if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
  if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
  if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
  if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];
  if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
  if (reference && _release && (!exists_check || rpm_exists(release:_release, rpm:exists_check))) {
    if (rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj)) flag++;
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'python3-rpm / python3-rpm-debuginfo / rpm / rpm-apidocs / rpm-build / etc');
}
VendorProductVersionCPE
rockylinuxrpm-develp-cpe:/a:rocky:linux:rpm-devel
rockylinuxrpm-devel-debuginfop-cpe:/a:rocky:linux:rpm-devel-debuginfo
rockylinuxrpm-libsp-cpe:/a:rocky:linux:rpm-libs
rockylinuxrpm-libs-debuginfop-cpe:/a:rocky:linux:rpm-libs-debuginfo
rockylinuxrpm-plugin-fapolicydp-cpe:/a:rocky:linux:rpm-plugin-fapolicyd
rockylinuxrpm-plugin-fapolicyd-debuginfop-cpe:/a:rocky:linux:rpm-plugin-fapolicyd-debuginfo
rockylinuxrpm-plugin-imap-cpe:/a:rocky:linux:rpm-plugin-ima
rockylinuxrpm-plugin-ima-debuginfop-cpe:/a:rocky:linux:rpm-plugin-ima-debuginfo
rockylinuxrpm-plugin-prioresetp-cpe:/a:rocky:linux:rpm-plugin-prioreset
rockylinuxrpm-plugin-prioreset-debuginfop-cpe:/a:rocky:linux:rpm-plugin-prioreset-debuginfo
Rows per page:
1-10 of 301

Related

nessus 47
amazon 2
openvas 28
osv 4
redhat 17
rocky 1
photon 8
fedora 3
suse 3
gentoo 1
aix 1
mageia 1
ubuntu 1
ibm 7
veracode 2
alpinelinux 2
centos 1
redhatcve 2
cbl_mariner 2
ubuntucve 2
f5 1
prion 2
almalinux 1
oraclelinux 2
debiancve 2
cve 2
nessus
nessus
EulerOS Virtualization 3.0.6.6 : rpm (EulerOS-SA-2022-1143)
2022-02-13 00:00:00
EulerOS Virtualization 3.0.2.6 : rpm (EulerOS-SA-2021-2876)
2022-01-06 00:00:00
Amazon Linux AMI : rpm (ALAS-2021-1521)
2021-07-13 00:00:00
amazon
amazon
Medium: rpm
2021-07-08 18:38:00
Medium: rpm
2021-07-14 20:43:00
openvas
openvas
Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2021-2876)
2021-12-31 00:00:00
Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2022-1143)
2022-02-13 00:00:00
Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2021-2443)
2021-09-15 00:00:00
osv
osv
Moderate: rpm security update
2021-06-29 13:43:23
rpm vulnerabilities
2022-07-21 06:56:30
CVE-2021-20271
2021-03-26 17:15:13
redhat
redhat
(RHSA-2021:2791) Moderate: rpm security update
2021-07-20 13:20:32
(RHSA-2021:2574) Moderate: rpm security update
2021-06-29 13:43:23
(RHSA-2021:4785) Moderate: rpm security update
2021-11-23 14:40:26
rocky
rocky
rpm security update
2021-06-29 13:43:23
photon
photon
Important Photon OS Security Update - PHSA-2021-0338
2021-04-15 00:00:00
Important Photon OS Security Update - PHSA-2021-0052
2021-06-25 00:00:00
Critical Photon OS Security Update - PHSA-2021-0383
2021-04-17 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: rpm-4.16.1.3-1.fc34
2021-03-30 00:17:25
[SECURITY] Fedora 33 Update: rpm-4.16.1.3-1.fc33
2021-03-30 14:31:25
[SECURITY] Fedora 32 Update: rpm-4.15.1.1-1.fc32.1
2021-04-07 15:26:31
suse
suse
Security update for rpm (important)
2021-08-17 00:00:00
Security update for rpm (important)
2021-10-18 00:00:00
Security update for libdnf (moderate)
2021-08-13 00:00:00
gentoo
gentoo
RPM: Multiple vulnerabilities
2021-07-20 00:00:00
aix
aix
AIX is vulnerable to arbitrary code execution and RPM database corruption and denial of service due to RPM.
2022-09-23 09:39:22
mageia
mageia
Updated rpm packages fix security vulnerabilities
2021-04-02 13:16:21
ubuntu
ubuntu
RPM Package Manager vulnerabilities
2022-07-21 00:00:00
ibm
ibm
Security Bulletin: Due to RPM, AIX is vulnerable to arbitrary code execution (CVE-2021-20271), RPM database corruption (CVE-2021-3421), and denial of service (CVE-2021-20266)
2022-09-23 16:07:09
Security Bulletin: IBM QRadar Network Security is affected by vulnerability in rpm. (CVE-2021-20271)
2022-07-07 10:50:13
Security Bulletin: IBM QRadar Network Packet Capture is using components with known vulnerabilities
2022-03-31 14:40:20
veracode
veracode
Arbitrary Code Execution
2021-03-23 17:19:29
Injection Vulnerability
2021-03-23 16:20:57
alpinelinux
alpinelinux
CVE-2021-20271
2021-03-26 17:15:00
CVE-2021-3421
2021-05-19 14:15:00
centos
centos
rpm security update
2021-12-01 19:22:41
redhatcve
redhatcve
CVE-2021-20271
2021-03-11 23:03:45
CVE-2021-3421
2021-03-11 23:03:50
cbl_mariner
cbl_mariner
CVE-2021-20271 affecting package rpm 4.14.2-11
2021-05-06 23:56:44
CVE-2021-3421 affecting package rpm 4.14.2-15
2021-05-06 23:56:44
ubuntucve
ubuntucve
CVE-2021-20271
2021-03-26 00:00:00
CVE-2021-3421
2021-05-19 00:00:00
f5
f5
K10396196 : Linux RPM vulnerability CVE-2021-20271
2022-01-05 00:00:00
prion
prion
Design/Logic Flaw
2021-03-26 17:15:00
Design/Logic Flaw
2021-05-19 14:15:00
almalinux
almalinux
Moderate: rpm security update
2021-06-29 13:43:23
oraclelinux
oraclelinux
rpm security update
2021-11-24 00:00:00
rpm security update
2021-06-30 00:00:00
debiancve
debiancve
CVE-2021-20271
2021-03-26 17:15:00
CVE-2021-3421
2021-05-19 14:15:00
cve
cve
CVE-2021-20271
2021-03-26 17:15:00
CVE-2021-3421
2021-05-19 14:15:00

6.9 Medium

AI Score

Confidence

High

JSON
Related for ROCKY_LINUX_RLSA-2021-2574.NASL
nessus47amazon2openvas28osv4redhat17rocky1photon8fedora3suse3gentoo1aix1mageia1ubuntu1ibm7veracode2alpinelinux2centos1redhatcve2cbl_mariner2ubuntucve2f51prion2almalinux1oraclelinux2debiancve2cve2