A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rpm-buildUpgrade rpm-plugin-fapolicyd | May 4, 2022 | Apr 30, 2021 |
| Alpine Linux | — | Upgrade rpm | Aug 22, 2024 | Apr 30, 2021 |
| Centos_linux | — | Upgrade python3-rpm-debuginfoUpgrade rpmUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-debugsourceUpgrade rpm-signUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-build-libsUpgrade python3-rpmUpgrade rpm-develUpgrade rpm-libs-debuginfoUpgrade rpm-build-debuginfoUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-libsUpgrade rpm-debuginfoUpgrade rpm-apidocsUpgrade rpm-plugin-fapolicydUpgrade rpm-build-libs-debuginfoUpgrade rpm-sign-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-buildUpgrade rpm-cronUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-plugin-ima | Nov 10, 2021 | Apr 30, 2021 |
| Debian | — | Upgrade rpm | Jul 30, 2024 | Apr 30, 2021 |
| Gentoo Linux | — | Upgrade app-arch/rpm. | Jul 21, 2021 | Apr 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rpm-plugin-selinuxUpgrade rpm-libsUpgrade rpm-buildUpgrade rpm-plugin-syslogUpgrade rpm-apidocsUpgrade rpm-develUpgrade rpm-plugin-imaUpgrade python2-rpmUpgrade rpm-cronUpgrade rpm-sign-libsUpgrade rpm-signUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-systemd-inhibitUpgrade python3-rpmUpgrade rpmUpgrade rpm-build-libs | Jun 28, 2021 | Apr 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rpm-libsUpgrade python3-rpmUpgrade rpm | Aug 10, 2021 | Apr 30, 2021 |
| Ibm Aix | — | Apply the fix or workaround for rpm_advisory | Oct 12, 2022 | Apr 30, 2021 |
| Oracle_linux | — | Upgrade rpm-apidocsUpgrade python3-rpmUpgrade rpm-libsUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-fapolicydUpgrade rpm-cronUpgrade rpm-plugin-imaUpgrade rpm-plugin-syslogUpgrade rpm-buildUpgrade rpm-signUpgrade rpm-build-libsUpgrade rpm-develUpgrade rpmUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-prioreset | Nov 17, 2021 | Mar 11, 2021 |
| Redhat_linux | — | Upgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-libsUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-debugsourceUpgrade rpm-build-debuginfoUpgrade rpm-build-libsUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-sign-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpm-apidocsUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-cronUpgrade rpm-signNo solution existsUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-develUpgrade rpm-plugin-fapolicydUpgrade rpm-plugin-syslogUpgrade rpm-plugin-prioresetUpgrade rpm-buildUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-debuginfoUpgrade rpmUpgrade python3-rpm-debuginfoUpgrade python3-rpm | Nov 10, 2021 | Apr 30, 2021 |
| Rocky_linux | — | Upgrade rpm-buildUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-debuginfoUpgrade rpm-develUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpmUpgrade rpm-plugin-syslogUpgrade python3-rpmUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-build-libsUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-build-libs-debuginfoUpgrade rpm-signUpgrade rpm-libsUpgrade rpm-libs-debuginfoUpgrade rpm-sign-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-build-debuginfoUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-selinuxUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-fapolicydUpgrade rpm-debugsource | Mar 12, 2024 | Apr 30, 2021 |
| Suse | — | Upgrade rpm-32bitUpgrade rpm-develUpgrade rpm-ndb-32bitUpgrade python2-rpmUpgrade rpm-buildUpgrade python3-rpmUpgrade rpm-ndbUpgrade rpm-pythonUpgrade rpm | Aug 18, 2021 | Apr 30, 2021 |
| Ubuntu | — | Upgrade librpmbuild8 (Ubuntu Pro)Upgrade librpmbuild3 (Ubuntu Pro)Upgrade librpm3 (Ubuntu Pro)Upgrade rpm (Ubuntu Pro)Upgrade librpmsign8 (Ubuntu Pro)Upgrade librpmio3 (Ubuntu Pro)Upgrade librpmio8 (Ubuntu Pro)Upgrade librpmsign3 (Ubuntu Pro)Upgrade librpm8 (Ubuntu Pro)Upgrade rpm-common (Ubuntu Pro) | Mar 22, 2023 | Apr 30, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 30, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub