A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rpm-apidocsUpgrade rpm-develUpgrade rpmUpgrade rpm-plugin-systemd-inhibitUpgrade python3-rpmUpgrade rpm-cronUpgrade rpm-plugin-fapolicydUpgrade rpm-libsUpgrade rpm-plugin-syslogUpgrade rpm-plugin-selinuxUpgrade rpm-buildUpgrade rpm-signUpgrade rpm-plugin-imaUpgrade rpm-build-libsUpgrade rpm-plugin-prioreset | May 4, 2022 | Mar 26, 2021 |
| Alpine Linux | — | Upgrade rpm | Aug 22, 2024 | Mar 26, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rpm-cronUpgrade rpm-apidocsUpgrade rpm-buildUpgrade python3-rpmUpgrade rpm-libsUpgrade rpm-develUpgrade rpm-debuginfoUpgrade rpm-plugin-systemd-inhibitUpgrade rpmUpgrade rpm-signUpgrade rpm-build-libsUpgrade python2-rpm | Jul 19, 2021 | Mar 26, 2021 |
| Amazon_linux | — | Upgrade rpm | Jul 13, 2021 | Mar 26, 2021 |
| Centos_linux | — | Upgrade rpm-build-libs-debuginfoUpgrade rpm-build-libsUpgrade python3-rpmUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-selinuxUpgrade rpm-cronUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-libsUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-sign-debuginfoUpgrade rpm-debugsourceUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-signUpgrade rpm-build-debuginfoUpgrade rpm-debuginfoUpgrade rpm-apidocsUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-fapolicydUpgrade rpm-devel-debuginfoUpgrade rpm-pythonUpgrade rpm-develUpgrade rpm-buildUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-plugin-imaUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-plugin-ima-debuginfoUpgrade rpm | Jun 30, 2021 | Mar 26, 2021 |
| Debian | — | Upgrade rpm | Jul 30, 2024 | Mar 26, 2021 |
| Gentoo Linux | — | Upgrade app-arch/rpm. | Jul 21, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rpmUpgrade rpm-develUpgrade rpm-pythonUpgrade rpm-libsUpgrade rpm-buildUpgrade rpm-build-libsUpgrade rpm-sign | Sep 16, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rpm-signUpgrade rpm-build-libsUpgrade rpm-pythonUpgrade rpm-develUpgrade rpm-libsUpgrade rpm-buildUpgrade rpm | Oct 26, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rpm-develUpgrade rpmUpgrade rpm-pythonUpgrade rpm-signUpgrade rpm-libsUpgrade rpm-buildUpgrade rpm-build-libs | Sep 7, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rpm-develUpgrade rpm-libsUpgrade python3-rpmUpgrade rpm-cronUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-signUpgrade rpm-plugin-syslogUpgrade rpmUpgrade python2-rpmUpgrade rpm-apidocsUpgrade rpm-build-libsUpgrade rpm-plugin-selinuxUpgrade rpm-sign-libsUpgrade rpm-plugin-prioresetUpgrade rpm-buildUpgrade rpm-plugin-ima | Jun 28, 2021 | Mar 26, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rpmUpgrade python3-rpmUpgrade rpm-libs | Aug 10, 2021 | Mar 26, 2021 |
| Ibm Aix | — | Apply the fix or workaround for rpm_advisory | Oct 12, 2022 | Mar 26, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle_linux | — | Upgrade rpm-libsUpgrade rpm-pythonUpgrade rpm-develUpgrade rpm-plugin-systemd-inhibitUpgrade python3-rpmUpgrade rpmUpgrade rpm-cronUpgrade rpm-plugin-fapolicydUpgrade rpm-signUpgrade rpm-plugin-syslogUpgrade rpm-apidocsUpgrade rpm-plugin-prioresetUpgrade rpm-buildUpgrade rpm-plugin-imaUpgrade rpm-plugin-selinuxUpgrade rpm-build-libs | Jun 30, 2021 | Mar 11, 2021 |
| Redhat_linux | — | Upgrade rpm-plugin-selinux-debuginfoUpgrade rpm-plugin-systemd-inhibitNo solution existsUpgrade rpm-build-libsUpgrade rpm-libs-debuginfoUpgrade rpm-apidocsUpgrade rpm-debugsourceUpgrade rpm-plugin-prioresetUpgrade rpm-develUpgrade rpm-plugin-selinuxUpgrade rpm-sign-debuginfoUpgrade python3-rpm-debuginfoUpgrade rpm-pythonUpgrade rpm-plugin-fapolicydUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-build-libs-debuginfoUpgrade rpm-signUpgrade rpm-cronUpgrade python3-rpmUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpmUpgrade rpm-plugin-syslogUpgrade rpm-build-debuginfoUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-libsUpgrade rpm-buildUpgrade rpm-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfo | Jun 30, 2021 | Mar 26, 2021 |
| Rocky_linux | — | Upgrade rpm-plugin-selinux-debuginfoUpgrade rpm-build-debuginfoUpgrade rpm-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-devel-debuginfoUpgrade rpm-build-libsUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-libs-debuginfoUpgrade rpm-sign-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-libsUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-buildUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-build-libs-debuginfoUpgrade rpm-debugsourceUpgrade rpm-develUpgrade rpm-plugin-fapolicydUpgrade rpmUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-signUpgrade python3-rpm | May 5, 2022 | Mar 26, 2021 |
| Suse | — | Upgrade hawkey-manUpgrade libdnf2Upgrade python3-rpmUpgrade rpm-32bitUpgrade python3-hawkeyUpgrade rpm-ndb-32bitUpgrade rpmUpgrade libdnf-repo-config-zyppUpgrade librepo0Upgrade libdnf-develUpgrade rpm-ndbUpgrade python2-rpmUpgrade python3-librepoUpgrade rpm-pythonUpgrade rpm-buildUpgrade librepo-develUpgrade rpm-develUpgrade python3-libdnf | Aug 14, 2021 | Mar 26, 2021 |
| Ubuntu | — | Upgrade librpmbuild3 (Ubuntu Pro)Upgrade librpmbuild8 (Ubuntu Pro)Upgrade librpmsign3 (Ubuntu Pro)Upgrade librpm3 (Ubuntu Pro)Upgrade librpmio3 (Ubuntu Pro)Upgrade rpm-common (Ubuntu Pro)Upgrade rpm (Ubuntu Pro)Upgrade librpm8 (Ubuntu Pro)Upgrade librpmio8 (Ubuntu Pro)Upgrade librpmsign8 (Ubuntu Pro) | Mar 22, 2023 | Mar 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub