Summary
Demi M. Obenour discovered that RPM Package Manager incorrectly handled
certain files. An attacker could possibly use this issue to corrupt the
database and cause a denial of service. (CVE-2021-3421, CVE-2021-20271)
Demi M. Obenour discovered that RPM Package Manager incorrectly handled
memory when processing certain data from the database. An attacker could
possibly use this issue to cause a denial of service. This issue only
affects Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2021-20266)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | rpm | 4.12.0.1+dfsg1-3ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | rpm | 4.14.1+dfsg1-2ubuntu0.1~esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | rpm | 4.14.2.1+dfsg1-1ubuntu0.1~esm1 |
Vulnerabilities 3
-
Unscored —
A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause…
-
Unscored —
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who c…
-
Unscored —
A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim t…