CVE-2021-20271CWE-345

CVE-2021-20271: falha em rpm

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar RPM+ Monitorar rpm

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.8%
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.
Produtos afetados
n/a · rpm