EulerOS 2.0 SP8 : rpm (EulerOS-SA-2021-1992)

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The RPM Package Manager RPM is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, a...

CVE-2021-20271 affecting package rpm 4.14.2-11

CVE-2021-20271 affecting package rpm 4.14.2-11. A patched version of the package is available...

Photon OS 2.0: Rpm PHSA-2021-2.0-0338

An update of the rpm package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0338. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148820;...

Updated rpm packages fix security vulnerabilities

This update from 4.16.1.2 to 4.16.1.3 fixes bugs several bugs the RPM package manager, including several security issues: Fix arbitrary data copied from signature header past signature checking CVE-2021-3421 Fix signature check bypass with corrupted package CVE-2021-20271 Fix missing bounds check...

Fedora: Security Advisory for rpm (FEDORA-2021-8d52a8a999)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 33 : rpm (2021-8d52a8a999)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-8d52a8a999 advisory. - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to...

CVE-2021-20271

A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from th...

CVE-2021-20271

Summary: CVE-2021-20271 affects the RPM package manager, with a flaw in the signature check when reading a package file that can lead to RPM database corruption and code execution. Impact: data integrity, confidentiality, and availability may be compromised. Exploitation: local attacker can explo...

CVE-2019-20271

...

CVE-2019-20271

CVE-2019-20271 is rejected/not used and does not represent an active vulnerability entry.