Search for packages
| purl | pkg:deb/debian/rpm@4.10.0-5%2Bdeb7u2 |
| Next non-vulnerable version | 4.18.0+dfsg-1+deb12u1 |
| Latest non-vulnerable version | 4.18.0+dfsg-1+deb12u1 |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1gkq-3yfu-fke8
Aliases: CVE-2021-20266 |
A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability. |
Affected by 4 other vulnerabilities. |
|
VCID-bd69-cfzq-c7ed
Aliases: CVE-2021-3421 |
A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha. |
Affected by 4 other vulnerabilities. |
|
VCID-faq3-97ja-9kc2
Aliases: CVE-2014-8118 |
Affected by 3 other vulnerabilities. |
|
|
VCID-r3dj-w6tw-rufb
Aliases: CVE-2013-6435 |
Affected by 3 other vulnerabilities. |
|
|
VCID-shux-h5z9-hfap
Aliases: CVE-2012-6088 |
Affected by 3 other vulnerabilities. |
|
|
VCID-y63j-ybs2-mfc9
Aliases: CVE-2021-20271 |
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability. |
Affected by 4 other vulnerabilities. |