CVE-2021-3421

Name of the Vulnerable Software and Affected Versions RPM versions prior to 4.17.0-alpha

Description A flaw was found in the RPM package's read functionality, allowing an attacker to cause RPM database corruption by convincing a victim to install a seemingly verifiable package or compromising an RPM repository. The highest threat from this issue is to data integrity. Exploitation may also allow a remote attacker to impact data integrity due to incorrect cryptographic signature verification of data.

Recommendations For versions prior to 4.17.0-alpha, update to version 4.17.0-alpha or later to resolve the issue. As a temporary workaround, consider restricting access to RPM repositories and verifying the integrity of packages before installation to minimize the risk of exploitation.