A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rpm-buildUpgrade rpm-plugin-fapolicyd | May 4, 2022 | Apr 30, 2021 |
| Alpine Linux | — | Upgrade rpm | Aug 22, 2024 | Apr 30, 2021 |
| Centos_linux | — | Upgrade rpm-plugin-prioresetUpgrade rpm-debugsourceUpgrade python3-rpm-debuginfoUpgrade rpmUpgrade rpm-build-libsUpgrade rpm-libs-debuginfoUpgrade rpm-build-debuginfoUpgrade python3-rpmUpgrade rpm-signUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-develUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-plugin-fapolicydUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-devel-debuginfoUpgrade rpm-buildUpgrade rpm-debuginfoUpgrade rpm-apidocsUpgrade rpm-plugin-selinuxUpgrade rpm-cronUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-build-libs-debuginfoUpgrade rpm-sign-debuginfoUpgrade rpm-libs | Nov 10, 2021 | Apr 30, 2021 |
| Debian | — | Upgrade rpm | Jul 30, 2024 | Apr 30, 2021 |
| Gentoo Linux | — | Upgrade app-arch/rpm. | Jul 21, 2021 | Apr 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rpmUpgrade rpm-plugin-prioresetUpgrade python3-rpmUpgrade rpm-signUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-build-libsUpgrade rpm-apidocsUpgrade python2-rpmUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-syslogUpgrade rpm-plugin-imaUpgrade rpm-buildUpgrade rpm-sign-libsUpgrade rpm-cronUpgrade rpm-develUpgrade rpm-libs | Jun 28, 2021 | Apr 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-rpmUpgrade rpm-libsUpgrade rpm | Aug 10, 2021 | Apr 30, 2021 |
| Ibm Aix | — | Apply the fix or workaround for rpm_advisory | Oct 12, 2022 | Apr 30, 2021 |
| Oracle_linux | — | Upgrade rpm-build-libsUpgrade rpm-signUpgrade rpm-plugin-prioresetUpgrade rpm-develUpgrade rpm-plugin-systemd-inhibitUpgrade rpmUpgrade rpm-apidocsUpgrade rpm-libsUpgrade rpm-plugin-syslogUpgrade rpm-plugin-selinuxUpgrade python3-rpmUpgrade rpm-buildUpgrade rpm-plugin-fapolicydUpgrade rpm-cronUpgrade rpm-plugin-ima | Nov 17, 2021 | Mar 11, 2021 |
| Redhat_linux | — | Upgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-sign-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-libsUpgrade rpm-apidocsUpgrade rpm-cronUpgrade rpm-build-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-build-libsUpgrade rpm-debugsourceUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-build-libs-debuginfoUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-fapolicydNo solution existsUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-develUpgrade rpm-buildUpgrade rpm-signUpgrade rpm-plugin-syslogUpgrade python3-rpm-debuginfoUpgrade rpmUpgrade rpm-debuginfoUpgrade rpm-plugin-ima-debuginfoUpgrade python3-rpmUpgrade rpm-plugin-ima | Nov 10, 2021 | Apr 30, 2021 |
| Rocky_linux | — | Upgrade rpmUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-buildUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-syslog-debuginfoUpgrade python3-rpmUpgrade rpm-develUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-build-libsUpgrade rpm-debuginfoUpgrade rpm-libsUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-prioresetUpgrade rpm-debugsourceUpgrade rpm-plugin-fapolicydUpgrade rpm-sign-debuginfoUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-signUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-build-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-build-libs-debuginfoUpgrade rpm-libs-debuginfo | Mar 12, 2024 | Apr 30, 2021 |
| Suse | — | Upgrade rpm-buildUpgrade python3-rpmUpgrade python2-rpmUpgrade rpm-pythonUpgrade rpmUpgrade rpm-ndbUpgrade rpm-develUpgrade rpm-32bitUpgrade rpm-ndb-32bit | Aug 18, 2021 | Apr 30, 2021 |
| Ubuntu | — | Upgrade librpmsign3 (Ubuntu Pro)Upgrade rpm-common (Ubuntu Pro)Upgrade librpmio3 (Ubuntu Pro)Upgrade librpmio8 (Ubuntu Pro)Upgrade librpmsign8 (Ubuntu Pro)Upgrade librpm8 (Ubuntu Pro)Upgrade rpm (Ubuntu Pro)Upgrade librpmbuild3 (Ubuntu Pro)Upgrade librpmbuild8 (Ubuntu Pro)Upgrade librpm3 (Ubuntu Pro) | Mar 22, 2023 | Apr 30, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 30, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub