PT-2021-7696

CVE-2021-20266

·

Published

2021-02-11

·

Updated

2026-10-31

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions RPM (affected versions not specified)
Description A flaw was found in RPM's hdrblobInit() function in lib/header.c, which allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability. Exploitation of the vulnerability may allow a remote attacker to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2021:4489
ALT-PU-2021-2518
ALT-PU-2021-2600
CESA-2021_4489
CLEANSTART-2024-GA13154
MGASA-2021-0167
OESA-2021-1223
OPENSUSE-SU-2021:1366-1
OPENSUSE-SU-2021_1366-1
OPENSUSE-SU-2021:2682-1
OPENSUSE-SU-2021_2682-1
RHSA-2021:4489
RHSA-2021_4489
RLSA-2021:4489
SUSE-SU-2021:2682-1
SUSE-SU-2021_2682-1
SUSE-SU-2021:3444-1
SUSE-SU-2021_3444-1
SUSE-SU-2022:3939-1
SUSE-SU-2022_3939-1
USN-5273-1
Found an issue in the description? Have something to add? Feel free to write us 👾