A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rpm-plugin-fapolicydUpgrade rpm-build | May 4, 2022 | Apr 30, 2021 |
| Alpine Linux | — | Upgrade rpm | Aug 22, 2024 | Apr 30, 2021 |
| Centos_linux | — | Upgrade rpm-build-debuginfoUpgrade rpm-signUpgrade python3-rpmUpgrade rpm-plugin-selinux-debuginfoUpgrade rpmUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-build-libsUpgrade rpm-plugin-syslog-debuginfoUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-develUpgrade rpm-debugsourceUpgrade rpm-buildUpgrade rpm-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-cronUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-apidocsUpgrade rpm-plugin-fapolicydUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-libsUpgrade rpm-sign-debuginfo | Nov 10, 2021 | Apr 30, 2021 |
| Debian | — | Upgrade rpm | Jul 30, 2024 | Apr 30, 2021 |
| Gentoo Linux | — | Upgrade app-arch/rpm. | Jul 21, 2021 | Apr 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rpm-apidocsUpgrade rpm-plugin-selinuxUpgrade rpm-cronUpgrade rpm-plugin-imaUpgrade rpm-plugin-syslogUpgrade rpm-sign-libsUpgrade python2-rpmUpgrade rpm-develUpgrade rpm-libsUpgrade rpm-buildUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-signUpgrade rpm-build-libsUpgrade rpm-plugin-prioresetUpgrade rpmUpgrade python3-rpm | Jun 28, 2021 | Apr 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rpmUpgrade python3-rpmUpgrade rpm-libs | Aug 10, 2021 | Apr 30, 2021 |
| Ibm Aix | — | Apply the fix or workaround for rpm_advisory | Oct 12, 2022 | Apr 30, 2021 |
| Oracle_linux | — | Upgrade rpm-plugin-selinuxUpgrade rpm-libsUpgrade python3-rpmUpgrade rpm-plugin-syslogUpgrade rpm-cronUpgrade rpm-plugin-fapolicydUpgrade rpm-buildUpgrade rpm-plugin-imaUpgrade rpm-apidocsUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-signUpgrade rpm-develUpgrade rpmUpgrade rpm-plugin-prioresetUpgrade rpm-build-libs | Nov 17, 2021 | Mar 11, 2021 |
| Redhat_linux | — | Upgrade rpm-sign-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-libsUpgrade rpm-build-libsUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-devel-debuginfoUpgrade rpm-cronUpgrade rpm-build-libs-debuginfoUpgrade rpm-debugsourceUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-libs-debuginfoUpgrade rpm-build-debuginfoUpgrade rpm-apidocsUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade python3-rpm-debuginfoUpgrade rpm-debuginfoUpgrade rpmUpgrade rpm-buildUpgrade python3-rpmUpgrade rpm-develUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-ima-debuginfoNo solution existsUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-plugin-fapolicydUpgrade rpm-signUpgrade rpm-plugin-syslog | Nov 10, 2021 | Apr 30, 2021 |
| Rocky_linux | — | Upgrade rpm-plugin-fapolicydUpgrade rpm-plugin-selinuxUpgrade rpm-sign-debuginfoUpgrade rpm-build-libs-debuginfoUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-build-debuginfoUpgrade rpm-libsUpgrade rpm-signUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-debugsourceUpgrade rpm-debuginfoUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-plugin-imaUpgrade rpm-build-libsUpgrade rpm-devel-debuginfoUpgrade rpm-develUpgrade python3-rpmUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-buildUpgrade python3-rpm-debuginfoUpgrade rpmUpgrade rpm-plugin-syslog-debuginfo | Mar 12, 2024 | Apr 30, 2021 |
| Suse | — | Upgrade rpm-32bitUpgrade rpm-ndb-32bitUpgrade rpm-develUpgrade python3-rpmUpgrade rpm-buildUpgrade rpm-ndbUpgrade rpm-pythonUpgrade python2-rpmUpgrade rpm | Aug 18, 2021 | Apr 30, 2021 |
| Ubuntu | — | Upgrade librpm3 (Ubuntu Pro)Upgrade librpmbuild8 (Ubuntu Pro)Upgrade librpmbuild3 (Ubuntu Pro)Upgrade rpm-common (Ubuntu Pro)Upgrade librpmsign8 (Ubuntu Pro)Upgrade librpmsign3 (Ubuntu Pro)Upgrade librpmio3 (Ubuntu Pro)Upgrade librpm8 (Ubuntu Pro)Upgrade rpm (Ubuntu Pro)Upgrade librpmio8 (Ubuntu Pro) | Mar 22, 2023 | Apr 30, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 30, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub