CVE-2021-20271CWE-345

CVE-2021-20271: fallo en rpm

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear RPM+ Monitorear rpm

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 0.8%
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.
Productos afectados
n/a · rpm