CVE-2021-20266
Fixed in a distro release EPSS 2%
A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.
Products: rpm, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | rpm-build | 4.14.3-19.el8 |
| AlmaLinux 8 | rpm-plugin-fapolicyd | 4.14.3-19.el8 |
| Debian 12 | rpm | 4.16.1.2+dfsg1-1 |
| Debian 13 | rpm | 4.16.1.2+dfsg1-1 |
| Debian 14 | rpm | 4.16.1.2+dfsg1-1 |
| Red Hat Enterprise Linux 8 | python3-rpm | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | python3-rpm-debuginfo | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-apidocs | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-build | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-build-debuginfo | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-build-libs | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-build-libs-debuginfo | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-cron | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-debuginfo | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-debugsource | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-devel | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-devel-debuginfo | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-libs | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-libs-debuginfo | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-plugin-fapolicyd | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-plugin-fapolicyd-debuginfo | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-plugin-ima | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-plugin-ima-debuginfo | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-plugin-prioreset | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-plugin-prioreset-debuginfo | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-plugin-selinux | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-plugin-selinux-debuginfo | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-plugin-syslog | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-plugin-syslog-debuginfo | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-plugin-systemd-inhibit | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-plugin-systemd-inhibit-debuginfo | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-sign | 0:4.14.3-19.el8 |
| Red Hat Enterprise Linux 8 | rpm-sign-debuginfo | 0:4.14.3-19.el8 |
| Rocky Linux 8 | rpm | 0:4.14.3-19.el8 |
| SUSE Linux Enterprise Micro 5.0 | python-rpm | 4.14.1-22.4.1 |
| SUSE Linux Enterprise Micro 5.0 | rpm | 4.14.1-22.4.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | python-rpm | 4.14.1-22.4.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | rpm | 4.14.1-22.4.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | python-rpm | 4.14.3-37.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | rpm | 4.14.3-37.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | rpm | 4.14.1-22.4.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | rpm | 4.14.3-37.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP2 | rpm-ndb | 4.14.1-22.4.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP3 | rpm-ndb | 4.14.3-37.2 |
| SUSE Linux Enterprise Module for Python 2 15 SP2 | python-rpm | 4.14.1-22.4.1 |
| SUSE Linux Enterprise Module for Python 2 15 SP3 | python-rpm | 4.14.3-37.2 |
| SUSE Linux Enterprise Server 12 SP5 | python3-rpm | 4.11.2-16.26.1 |
| SUSE Linux Enterprise Server 12 SP5 | rpm | 4.11.2-16.26.1 |
| SUSE Linux Enterprise Server 12 SP5 | rpm-python | 4.11.2-16.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python3-rpm | 4.11.2-16.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | rpm | 4.11.2-16.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | rpm-python | 4.11.2-16.26.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | rpm | 4.11.2-16.26.1 |
| SUSE Manager Proxy Module 4.1 | rpm | 4.14.1-22.4.2 |
| SUSE Manager Proxy Module 4.2 | rpm | 4.14.3-37.2 |
| SUSE Manager Server Module 4.1 | rpm | 4.14.1-22.4.2 |
| SUSE Manager Server Module 4.2 | rpm | 4.14.3-37.2 |
| Ubuntu Pro 16.04 LTS | rpm | 4.12.0.1+dfsg1-3ubuntu0.1~esm1 |
| Ubuntu Pro 18.04 LTS | rpm | 4.14.1+dfsg1-2ubuntu0.1~esm1 |
| Ubuntu Pro 20.04 LTS | rpm | 4.14.2.1+dfsg1-1ubuntu0.1~esm1 |
| openSUSE Leap 15.2 | python-rpm | 4.14.1-lp152.18.3.1 |
| openSUSE Leap 15.2 | rpm | 4.14.1-lp152.18.3.1 |
| openSUSE Leap 15.3 | python-rpm | 4.14.3-37.2 |
| openSUSE Leap 15.3 | rpm | 4.14.3-37.2 |
| openSUSE Leap 15.3 | rpm-ndb | 4.14.3-37.2 |