CVE-2021-3421

State: Published
Severity: Not scored
Published: May 19, 2021
Updated: Aug 3, 2024
Reserved: Mar 3, 2021

Description

A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha.

Scores

The record has no CVSS score.

Weaknesses

CWE-347

Affected Products

Product	Versions
rpmn/a	rpm 4.17.0-alphaAffected

References

FEDORA-2021-2383d950fdvendor-advisory
FEDORA-2021-8d52a8a999vendor-advisory
FEDORA-2021-662680e477vendor-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1927747
GLSA-202107-43vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.