A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-rpm | Aug 22, 2024 | May 19, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-python2-rpmamazon-linux-ami-2-upgrade-python3-rpmamazon-linux-ami-2-upgrade-rpmamazon-linux-ami-2-upgrade-rpm-apidocsamazon-linux-ami-2-upgrade-rpm-buildamazon-linux-ami-2-upgrade-rpm-build-libsamazon-linux-ami-2-upgrade-rpm-cronamazon-linux-ami-2-upgrade-rpm-debuginfoamazon-linux-ami-2-upgrade-rpm-develamazon-linux-ami-2-upgrade-rpm-libsamazon-linux-ami-2-upgrade-rpm-plugin-systemd-inhibitamazon-linux-ami-2-upgrade-rpm-sign | Jul 19, 2021 | May 19, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-rpm | Jul 13, 2021 | May 19, 2021 |
| Centos_linux | — | centos-upgrade-python3-rpmcentos-upgrade-python3-rpm-debuginfocentos-upgrade-rpmcentos-upgrade-rpm-apidocscentos-upgrade-rpm-buildcentos-upgrade-rpm-build-debuginfocentos-upgrade-rpm-build-libscentos-upgrade-rpm-build-libs-debuginfocentos-upgrade-rpm-croncentos-upgrade-rpm-debuginfocentos-upgrade-rpm-debugsourcecentos-upgrade-rpm-develcentos-upgrade-rpm-devel-debuginfocentos-upgrade-rpm-libscentos-upgrade-rpm-libs-debuginfocentos-upgrade-rpm-plugin-fapolicydcentos-upgrade-rpm-plugin-fapolicyd-debuginfocentos-upgrade-rpm-plugin-imacentos-upgrade-rpm-plugin-ima-debuginfocentos-upgrade-rpm-plugin-prioresetcentos-upgrade-rpm-plugin-prioreset-debuginfocentos-upgrade-rpm-plugin-selinuxcentos-upgrade-rpm-plugin-selinux-debuginfocentos-upgrade-rpm-plugin-syslogcentos-upgrade-rpm-plugin-syslog-debuginfocentos-upgrade-rpm-plugin-systemd-inhibitcentos-upgrade-rpm-plugin-systemd-inhibit-debuginfocentos-upgrade-rpm-signcentos-upgrade-rpm-sign-debuginfo | Sep 10, 2021 | May 19, 2021 |
| Debian | debian-upgrade-rpm | Jul 30, 2024 | May 19, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-app-arch-rpm | Jul 21, 2021 | May 19, 2021 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-rpmhuawei-euleros-2_0_sp2-upgrade-rpm-buildhuawei-euleros-2_0_sp2-upgrade-rpm-build-libshuawei-euleros-2_0_sp2-upgrade-rpm-develhuawei-euleros-2_0_sp2-upgrade-rpm-libshuawei-euleros-2_0_sp2-upgrade-rpm-pythonhuawei-euleros-2_0_sp2-upgrade-rpm-sign | Sep 16, 2021 | May 19, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-rpmhuawei-euleros-2_0_sp3-upgrade-rpm-buildhuawei-euleros-2_0_sp3-upgrade-rpm-build-libshuawei-euleros-2_0_sp3-upgrade-rpm-develhuawei-euleros-2_0_sp3-upgrade-rpm-libshuawei-euleros-2_0_sp3-upgrade-rpm-pythonhuawei-euleros-2_0_sp3-upgrade-rpm-sign | Oct 26, 2021 | May 19, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-rpmhuawei-euleros-2_0_sp5-upgrade-rpm-buildhuawei-euleros-2_0_sp5-upgrade-rpm-build-libshuawei-euleros-2_0_sp5-upgrade-rpm-develhuawei-euleros-2_0_sp5-upgrade-rpm-libshuawei-euleros-2_0_sp5-upgrade-rpm-pythonhuawei-euleros-2_0_sp5-upgrade-rpm-sign | Sep 7, 2021 | May 19, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-python2-rpmhuawei-euleros-2_0_sp8-upgrade-python3-rpmhuawei-euleros-2_0_sp8-upgrade-rpmhuawei-euleros-2_0_sp8-upgrade-rpm-apidocshuawei-euleros-2_0_sp8-upgrade-rpm-buildhuawei-euleros-2_0_sp8-upgrade-rpm-build-libshuawei-euleros-2_0_sp8-upgrade-rpm-cronhuawei-euleros-2_0_sp8-upgrade-rpm-develhuawei-euleros-2_0_sp8-upgrade-rpm-libshuawei-euleros-2_0_sp8-upgrade-rpm-plugin-imahuawei-euleros-2_0_sp8-upgrade-rpm-plugin-prioresethuawei-euleros-2_0_sp8-upgrade-rpm-plugin-selinuxhuawei-euleros-2_0_sp8-upgrade-rpm-plugin-sysloghuawei-euleros-2_0_sp8-upgrade-rpm-plugin-systemd-inhibithuawei-euleros-2_0_sp8-upgrade-rpm-signhuawei-euleros-2_0_sp8-upgrade-rpm-sign-libs | Jun 28, 2021 | May 19, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-python3-rpmhuawei-euleros-2_0_sp9-upgrade-rpmhuawei-euleros-2_0_sp9-upgrade-rpm-libs | Aug 10, 2021 | May 19, 2021 | |
| Ibm Aix | ibm-aix-rpm_advisory | Oct 12, 2022 | May 19, 2021 | |
| Redhat_linux | redhat-upgrade-python3-rpmredhat-upgrade-python3-rpm-debuginforedhat-upgrade-rpmredhat-upgrade-rpm-apidocsredhat-upgrade-rpm-buildredhat-upgrade-rpm-build-debuginforedhat-upgrade-rpm-build-libsredhat-upgrade-rpm-build-libs-debuginforedhat-upgrade-rpm-cronredhat-upgrade-rpm-debuginforedhat-upgrade-rpm-debugsourceredhat-upgrade-rpm-develredhat-upgrade-rpm-devel-debuginforedhat-upgrade-rpm-libsredhat-upgrade-rpm-libs-debuginforedhat-upgrade-rpm-plugin-fapolicydredhat-upgrade-rpm-plugin-fapolicyd-debuginforedhat-upgrade-rpm-plugin-imaredhat-upgrade-rpm-plugin-ima-debuginforedhat-upgrade-rpm-plugin-prioresetredhat-upgrade-rpm-plugin-prioreset-debuginforedhat-upgrade-rpm-plugin-selinuxredhat-upgrade-rpm-plugin-selinux-debuginforedhat-upgrade-rpm-plugin-syslogredhat-upgrade-rpm-plugin-syslog-debuginforedhat-upgrade-rpm-plugin-systemd-inhibitredhat-upgrade-rpm-plugin-systemd-inhibit-debuginforedhat-upgrade-rpm-signredhat-upgrade-rpm-sign-debuginfo | Sep 10, 2021 | May 19, 2021 | |
| Rocky_linux | rocky-upgrade-python3-rpmrocky-upgrade-python3-rpm-debuginforocky-upgrade-rpmrocky-upgrade-rpm-buildrocky-upgrade-rpm-build-debuginforocky-upgrade-rpm-build-libsrocky-upgrade-rpm-build-libs-debuginforocky-upgrade-rpm-debuginforocky-upgrade-rpm-debugsourcerocky-upgrade-rpm-develrocky-upgrade-rpm-devel-debuginforocky-upgrade-rpm-libsrocky-upgrade-rpm-libs-debuginforocky-upgrade-rpm-plugin-fapolicydrocky-upgrade-rpm-plugin-fapolicyd-debuginforocky-upgrade-rpm-plugin-imarocky-upgrade-rpm-plugin-ima-debuginforocky-upgrade-rpm-plugin-prioresetrocky-upgrade-rpm-plugin-prioreset-debuginforocky-upgrade-rpm-plugin-selinuxrocky-upgrade-rpm-plugin-selinux-debuginforocky-upgrade-rpm-plugin-syslogrocky-upgrade-rpm-plugin-syslog-debuginforocky-upgrade-rpm-plugin-systemd-inhibitrocky-upgrade-rpm-plugin-systemd-inhibit-debuginforocky-upgrade-rpm-signrocky-upgrade-rpm-sign-debuginfo | May 5, 2022 | May 19, 2021 | |
| Suse | — | suse-upgrade-hawkey-mansuse-upgrade-libdnf-develsuse-upgrade-libdnf-repo-config-zyppsuse-upgrade-libdnf2suse-upgrade-librepo-develsuse-upgrade-librepo0suse-upgrade-python2-rpmsuse-upgrade-python3-hawkeysuse-upgrade-python3-libdnfsuse-upgrade-python3-libreposuse-upgrade-python3-rpmsuse-upgrade-rpmsuse-upgrade-rpm-32bitsuse-upgrade-rpm-buildsuse-upgrade-rpm-develsuse-upgrade-rpm-ndbsuse-upgrade-rpm-ndb-32bitsuse-upgrade-rpm-python | Aug 14, 2021 | May 19, 2021 |
| Ubuntu | ubuntu-pro-upgrade-librpm3ubuntu-pro-upgrade-librpm8ubuntu-pro-upgrade-librpmbuild3ubuntu-pro-upgrade-librpmbuild8ubuntu-pro-upgrade-librpmio3ubuntu-pro-upgrade-librpmio8ubuntu-pro-upgrade-librpmsign3ubuntu-pro-upgrade-librpmsign8ubuntu-pro-upgrade-rpmubuntu-pro-upgrade-rpm-common | Mar 22, 2023 | May 19, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | May 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub