A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rpm-buildUpgrade rpm-plugin-fapolicyd | May 4, 2022 | Apr 30, 2021 |
| Alpine Linux | — | Upgrade rpm | Aug 22, 2024 | Apr 30, 2021 |
| Centos_linux | — | Upgrade rpm-signUpgrade rpm-build-debuginfoUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-syslog-debuginfoUpgrade python3-rpmUpgrade rpm-debugsourceUpgrade rpm-plugin-prioresetUpgrade python3-rpm-debuginfoUpgrade rpm-develUpgrade rpm-build-libsUpgrade rpmUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-apidocsUpgrade rpm-plugin-fapolicydUpgrade rpm-debuginfoUpgrade rpm-buildUpgrade rpm-sign-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-cronUpgrade rpm-plugin-imaUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-libsUpgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-prioreset-debuginfo | Nov 10, 2021 | Apr 30, 2021 |
| Debian | — | Upgrade rpm | Jul 30, 2024 | Apr 30, 2021 |
| Gentoo Linux | — | Upgrade app-arch/rpm. | Jul 21, 2021 | Apr 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rpm-sign-libsUpgrade python2-rpmUpgrade rpm-buildUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-imaUpgrade rpm-libsUpgrade rpm-develUpgrade rpm-cronUpgrade rpm-apidocsUpgrade rpm-plugin-syslogUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-build-libsUpgrade rpm-signUpgrade rpmUpgrade python3-rpm | Jun 28, 2021 | Apr 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rpm-libsUpgrade python3-rpmUpgrade rpm | Aug 10, 2021 | Apr 30, 2021 |
| Ibm Aix | — | Apply the fix or workaround for rpm_advisory | Oct 12, 2022 | Apr 30, 2021 |
| Oracle_linux | — | Upgrade rpm-build-libsUpgrade rpm-develUpgrade rpm-signUpgrade rpmUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-systemd-inhibitUpgrade python3-rpmUpgrade rpm-apidocsUpgrade rpm-plugin-selinuxUpgrade rpm-libsUpgrade rpm-buildUpgrade rpm-plugin-fapolicydUpgrade rpm-plugin-imaUpgrade rpm-cronUpgrade rpm-plugin-syslog | Nov 17, 2021 | Mar 11, 2021 |
| Redhat_linux | — | Upgrade rpm-plugin-selinuxUpgrade rpm-build-libs-debuginfoUpgrade rpm-debugsourceUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-apidocsUpgrade rpm-build-debuginfoUpgrade rpm-libsUpgrade rpm-devel-debuginfoUpgrade rpm-build-libsUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-cronUpgrade rpm-sign-debuginfoUpgrade rpm-plugin-prioresetUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-fapolicydUpgrade rpm-debuginfoUpgrade rpmUpgrade rpm-develUpgrade rpm-plugin-imaUpgrade rpm-signUpgrade rpm-plugin-ima-debuginfoUpgrade python3-rpmUpgrade rpm-buildUpgrade rpm-plugin-syslogUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-prioreset-debuginfoNo solution exists | Nov 10, 2021 | Apr 30, 2021 |
| Rocky_linux | — | Upgrade python3-rpmUpgrade rpm-develUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-build-libsUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-debuginfoUpgrade rpm-buildUpgrade rpm-devel-debuginfoUpgrade rpmUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-fapolicydUpgrade rpm-plugin-selinuxUpgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-build-debuginfoUpgrade rpm-sign-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-debugsourceUpgrade rpm-libsUpgrade rpm-sign | Mar 12, 2024 | Apr 30, 2021 |
| Suse | — | Upgrade rpm-buildUpgrade python2-rpmUpgrade python3-rpmUpgrade rpm-pythonUpgrade rpmUpgrade rpm-ndbUpgrade rpm-32bitUpgrade rpm-develUpgrade rpm-ndb-32bit | Aug 18, 2021 | Apr 30, 2021 |
| Ubuntu | — | Upgrade librpmbuild8 (Ubuntu Pro)Upgrade librpmbuild3 (Ubuntu Pro)Upgrade librpm3 (Ubuntu Pro)Upgrade rpm (Ubuntu Pro)Upgrade librpmsign3 (Ubuntu Pro)Upgrade librpmio3 (Ubuntu Pro)Upgrade rpm-common (Ubuntu Pro)Upgrade librpmio8 (Ubuntu Pro)Upgrade librpmsign8 (Ubuntu Pro)Upgrade librpm8 (Ubuntu Pro) | Mar 22, 2023 | Apr 30, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 30, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub