A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rpm-plugin-fapolicydUpgrade rpm-build | May 4, 2022 | Apr 30, 2021 |
| Alpine Linux | — | Upgrade rpm | Aug 22, 2024 | Apr 30, 2021 |
| Centos_linux | — | Upgrade rpm-debugsourceUpgrade rpm-plugin-prioresetUpgrade rpm-build-libsUpgrade rpm-develUpgrade rpm-libs-debuginfoUpgrade rpm-signUpgrade rpm-plugin-selinux-debuginfoUpgrade python3-rpmUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-build-debuginfoUpgrade rpmUpgrade rpm-plugin-systemd-inhibitUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-apidocsUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-fapolicydUpgrade rpm-sign-debuginfoUpgrade rpm-libsUpgrade rpm-buildUpgrade rpm-plugin-syslogUpgrade rpm-cronUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-debuginfo | Nov 10, 2021 | Apr 30, 2021 |
| Debian | — | Upgrade rpm | Jul 30, 2024 | Apr 30, 2021 |
| Gentoo Linux | — | Upgrade app-arch/rpm. | Jul 21, 2021 | Apr 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rpm-plugin-prioresetUpgrade rpm-build-libsUpgrade rpmUpgrade rpm-signUpgrade rpm-plugin-systemd-inhibitUpgrade python3-rpmUpgrade rpm-sign-libsUpgrade rpm-cronUpgrade python2-rpmUpgrade rpm-plugin-imaUpgrade rpm-plugin-syslogUpgrade rpm-buildUpgrade rpm-libsUpgrade rpm-develUpgrade rpm-plugin-selinuxUpgrade rpm-apidocs | Jun 28, 2021 | Apr 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rpmUpgrade python3-rpmUpgrade rpm-libs | Aug 10, 2021 | Apr 30, 2021 |
| Ibm Aix | — | Apply the fix or workaround for rpm_advisory | Oct 12, 2022 | Apr 30, 2021 |
| Oracle_linux | — | Upgrade rpm-plugin-syslogUpgrade rpm-libsUpgrade rpm-plugin-imaUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-fapolicydUpgrade rpm-buildUpgrade rpm-cronUpgrade python3-rpmUpgrade rpm-apidocsUpgrade rpm-signUpgrade rpm-develUpgrade rpm-build-libsUpgrade rpm-plugin-systemd-inhibitUpgrade rpmUpgrade rpm-plugin-prioreset | Nov 17, 2021 | Mar 11, 2021 |
| Redhat_linux | — | Upgrade rpm-plugin-ima-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-signUpgrade rpmNo solution existsUpgrade rpm-buildUpgrade rpm-debuginfoUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-plugin-fapolicydUpgrade rpm-plugin-imaUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-develUpgrade python3-rpmUpgrade rpm-cronUpgrade rpm-debugsourceUpgrade rpm-apidocsUpgrade rpm-build-libsUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-build-debuginfoUpgrade rpm-libs-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-libsUpgrade rpm-sign-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfo | Nov 10, 2021 | Apr 30, 2021 |
| Rocky_linux | — | Upgrade rpm-plugin-selinuxUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-sign-debuginfoUpgrade rpm-build-debuginfoUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-libsUpgrade rpm-debugsourceUpgrade rpm-plugin-fapolicydUpgrade rpm-signUpgrade rpm-build-libs-debuginfoUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-build-libsUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-buildUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-debuginfoUpgrade rpm-devel-debuginfoUpgrade python3-rpmUpgrade rpm-develUpgrade rpm | Mar 12, 2024 | Apr 30, 2021 |
| Suse | — | Upgrade rpm-32bitUpgrade rpm-develUpgrade rpm-ndb-32bitUpgrade rpm-buildUpgrade python3-rpmUpgrade rpmUpgrade rpm-pythonUpgrade python2-rpmUpgrade rpm-ndb | Aug 18, 2021 | Apr 30, 2021 |
| Ubuntu | — | Upgrade librpmbuild8 (Ubuntu Pro)Upgrade librpmbuild3 (Ubuntu Pro)Upgrade librpm3 (Ubuntu Pro)Upgrade librpm8 (Ubuntu Pro)Upgrade rpm (Ubuntu Pro)Upgrade librpmsign8 (Ubuntu Pro)Upgrade librpmsign3 (Ubuntu Pro)Upgrade librpmio8 (Ubuntu Pro)Upgrade rpm-common (Ubuntu Pro)Upgrade librpmio3 (Ubuntu Pro) | Mar 22, 2023 | Apr 30, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 30, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub