{"id":"CVE-2021-20266","aliases":["ALPINE-CVE-2021-20266","ALSA-2021:4489","BELL-CVE-2021-20266","CLSA-2022-1644869807","DEBIAN-CVE-2021-20266","EUVD-2021-7702","GHSA-8vf3-43pf-v3cq","MGASA-2021-0167","OESA-2021-1223","RHSA-2021:4489","RLSA-2021:4489","SUSE-SU-2021:2682-1","SUSE-SU-2021:3444-1","SUSE-SU-2022:3939-1","UBUNTU-CVE-2021-20266","USN-5273-1","openSUSE-SU-2021:1366-1","openSUSE-SU-2021:2682-1"],"status":"published","title":"A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can...","description":"A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01531,"percentile":0.75104,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2021-04-02T10:16:21Z","modified":"2026-11-03T06:32:26Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"rpm","fixed_in":["4.16.1.3-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"rpm-build","fixed_in":["4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"rpm-plugin-fapolicyd","fixed_in":["4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"rpm","fixed_in":["4.16.1.2+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rpm","fixed_in":["4.16.1.2+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rpm","fixed_in":["4.16.1.2+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-rpm-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build-libs-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-debugsource","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-devel-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-libs-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-fapolicyd","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-fapolicyd-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-ima-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-prioreset-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-selinux-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-syslog-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-systemd-inhibit-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-sign-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-rpm","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-rpm-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-apidocs","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-libs","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-libs-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-cron","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-debugsource","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-devel","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-devel-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-libs","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-libs-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-fapolicyd-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-ima","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-ima-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-prioreset","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-prioreset-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-selinux","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-selinux-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-syslog","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-syslog-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-systemd-inhibit","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-systemd-inhibit-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-sign","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-sign-debuginfo","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"rpm","fixed_in":["0:4.14.3-19.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rpm","fixed_in":["4.14.1+dfsg1-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rpm","fixed_in":["4.14.2.1+dfsg1-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rpm-plugin-fapolicyd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-plugin-fapolicyd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-plugin-ima","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-plugin-prioreset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-plugin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-plugin-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-14.el8.4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.2+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.2+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.2+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1.3-1.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.1-24.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-build-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-fapolicyd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-fapolicyd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-ima-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-prioreset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-selinux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-syslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-plugin-systemd-inhibit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rpm-sign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-build-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-fapolicyd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-ima","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-ima-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-prioreset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-prioreset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-selinux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-syslog-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-systemd-inhibit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-plugin-systemd-inhibit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-sign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rpm-sign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.3-19.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP2","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.1","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-22.4.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python3-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python3-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"rpm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2-16.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1+dfsg1-2ubuntu0.1~esm1"}]}],"versions":["4.12.0.2+dfsg1-2build2","4.14.0+dfsg1-2","4.14.1+dfsg1-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.2.1+dfsg1-1ubuntu0.1~esm1"}]}],"versions":["4.14.2.1+dfsg1-1","4.14.2.1+dfsg1-1build1","4.14.2.1+dfsg1-1build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.0.1+dfsg1-3ubuntu0.1~esm1"}]}],"versions":["4.12.0.1+dfsg1-3build2","4.12.0.1+dfsg1-3build3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1+dfsg1-2ubuntu0.1~esm1"}]}],"versions":["4.12.0.2+dfsg1-2build2","4.14.0+dfsg1-2","4.14.1+dfsg1-2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.2.1+dfsg1-1ubuntu0.1~esm1"}]}],"versions":["4.14.2.1+dfsg1-1","4.14.2.1+dfsg1-1build1","4.14.2.1+dfsg1-1build2"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-lp152.18.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-lp152.18.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"rpm-ndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-37.2"}]}],"bundled":3}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"red hat, inc.","product":"rpm"},{"vendor":"rpm","product":"rpm"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927741","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202107-43","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20266","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/"},{"url":"https://github.com/advisories/GHSA-8vf3-43pf-v3cq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-20266","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-20266","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-20266","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1644869807.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-20266","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0167.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28674","tags":["report"]},{"url":"https://rpm.org/wiki/Releases/4.16.1.3","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1223","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3421","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4489","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1840142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1938928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996665","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4489.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20266","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20266","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4489","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212682-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179416","tags":["report"]},{"url":"https://bugzilla.suse.com/1181805","tags":["report"]},{"url":"https://bugzilla.suse.com/1183543","tags":["report"]},{"url":"https://bugzilla.suse.com/1183545","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3421","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213444-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1183632","tags":["report"]},{"url":"https://bugzilla.suse.com/1183659","tags":["report"]},{"url":"https://bugzilla.suse.com/1185299","tags":["report"]},{"url":"https://bugzilla.suse.com/1187670","tags":["report"]},{"url":"https://bugzilla.suse.com/1188548","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223939-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/996280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20266","tags":["report"]},{"url":"https://github.com/rpm-software-management/rpm/pull/1500","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5273-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20271","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WOGLQWSIIR4HYRWXGETEIHB6SM6A2MNK/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQDL4MT3J7VM3IS3TI4EMLQJHDPTSZLZ/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-20266","description":"A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-04-30T11:22:49Z","modified":"2024-08-03T17:37:23.124Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:32:55.564736Z"}],"euvd":[{"id":"EUVD-2021-7702","description":"A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-04-30T11:22:49Z","modified":"2024-08-03T17:37:23Z","updated_at":"2026-11-03T03:25:09.355483Z"}],"ghsa":[{"id":"GHSA-8vf3-43pf-v3cq","title":"A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can...","description":"A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.","status":"published","published":"2022-05-24T17:49:18Z","modified":"2023-01-29T05:07:28Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:46:10.15423Z"}],"nvd":[{"id":"CVE-2021-20266","description":"A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-04-30T12:15:07.5Z","modified":"2026-06-17T03:33:34.4Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:06:52.81233Z"}],"osv":[{"id":"ALPINE-CVE-2021-20266","description":"A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-04-30T12:15:07.5Z","modified":"2026-11-03T06:32:26.930723659Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"BELL-CVE-2021-20266","title":"CVE-2021-20266 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:29.51576Z","modified":"2026-01-26T09:48:54.44074Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2021-20266","description":"A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-04-30T12:15:07.5Z","modified":"2026-10-24T10:30:16.299621958Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:18.004149Z"},{"id":"DEBIAN-CVE-2021-20266","description":"A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-04-30T12:15:07.5Z","modified":"2026-10-23T18:03:10.318815052Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"OESA-2021-1223","title":"rpm security update","description":"The RPM Package Manager (RPM) is a powerful package management system capability as below\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in RPM\u0026apos;s hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.(CVE-2021-20266)\r\n\r\nA flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha.(CVE-2021-3421)","status":"published","published":"2021-06-12T11:04:27Z","modified":"2026-08-18T01:15:12.391802752Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:4489","title":"Red Hat Security Advisory: rpm security, bug fix, and enhancement update","status":"published","published":"2024-09-16T06:11:42Z","modified":"2026-06-26T12:21:16.686193787Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:4489","title":"Low: rpm security, bug fix, and enhancement update","description":"The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.\n\nSecurity Fix(es):\n\n* rpm: missing length checks in hdrblobInit() (CVE-2021-20266)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:32:33Z","modified":"2026-02-05T07:45:08.123277Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-20266","description":"A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-04-30T12:15:00Z","modified":"2026-04-22T12:46:24.069585Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"ALSA-2021:4489","title":"Low: rpm security, bug fix, and enhancement update","description":"The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.\n\nSecurity Fix(es):\n\n* rpm: missing length checks in hdrblobInit() (CVE-2021-20266)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:32:33Z","modified":"2026-10-29T11:01:41.76728775Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2022-1644869807","title":"Fix of CVE: CVE-2021-3521, CVE-2021-20266","description":"- CVE-2021-20266: missing length checks in hdrblobInit()\n- CVE-2021-3521: RPM does not require subkeys to have a valid binding signature\n- Address important covscan issues (#1996665, #2022537)","status":"published","published":"2022-02-14T20:16:47Z","modified":"2026-10-21T10:47:08.442044788Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"MGASA-2021-0167","title":"Updated rpm packages fix security vulnerabilities","description":"This update from 4.16.1.2 to 4.16.1.3 fixes bugs several bugs the RPM\npackage manager, including several security issues:\n* Fix arbitrary data copied from signature header past signature checking\n  (CVE-2021-3421)\n* Fix signature check bypass with corrupted package (CVE-2021-20271)\n* Fix missing bounds checks in headerImport() and headerCheck()\n  (CVE-2021-20266)\n* Fix missing sanity checks on header entry count and region data overlap\n* Fix access past end of header if the last entry is string type\n* Fix unsafe headerCopyLoad() still used in codebase\n","status":"published","published":"2021-04-02T10:16:21Z","modified":"2026-04-16T04:43:52.104498754Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:1366-1","title":"Security update for rpm","description":"This update for rpm fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-3421, CVE-2021-20271, CVE-2021-20266: Multiple header check improvements (bsc#1183543, bsc#1183545, bsc#1183632)\n- PGP hardening changes (bsc#1185299)\n- Fixed potential access of freed mem in ndb's glue code (bsc#1179416)\n\nMaintaince issues fixed:\n\n- Fixed zstd detection (bsc#1187670)\n- Added ndb rofs support (bsc#1188548)\n- Fixed deadlock when multiple rpm processes try tp acquire the database lock (bsc#1183659)\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-10-18T12:12:22Z","modified":"2026-02-04T03:34:08.942482Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:2682-1","title":"Security update for rpm","description":"This update for rpm fixes the following issues:\n\n- Changed default package verification level to 'none' to be compatible to rpm-4.14.1\n- Made illegal obsoletes a warning\n- Fixed a potential access of freed mem in ndb's glue code (bsc#1179416)\n- Added support for enforcing signature policy and payload verification step to\n  transactions (jsc#SLE-17817)\n- Added :humansi and :hmaniec query formatters for human readable output\n- Added query selectors for whatobsoletes and whatconflicts\n- Added support for sorting caret higher than base version\n- rpm does no longer require the signature header to be in a contiguous\n  region when signing (bsc#1181805)\n\nSecurity fixes:\n\n- CVE-2021-3421: A flaw was found in the RPM package in the read functionality. This flaw allows an\n  attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM\n  repository, to cause RPM database corruption. The highest threat from this vulnerability is to\n  data integrity (bsc#1183543)\n\n- CVE-2021-20271: A flaw was found in RPM's signature check functionality when reading a package file.\n  This flaw allows an attacker who can convince a victim to install a seemingly verifiable package,\n  whose signature header was modified, to cause RPM database corruption and execute code. The highest\n  threat from this vulnerability is to data integrity, confidentiality, and system availability (bsc#1183545)\n\n- CVE-2021-20266: A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker\n  who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability\n  is to system availability.\n","status":"published","published":"2021-08-17T07:23:06Z","modified":"2026-02-04T02:31:43.264947Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"SUSE-SU-2021:2682-1","title":"Security update for rpm","description":"This update for rpm fixes the following issues:\n\n- Changed default package verification level to 'none' to be compatible to rpm-4.14.1\n- Made illegal obsoletes a warning\n- Fixed a potential access of freed mem in ndb's glue code (bsc#1179416)\n- Added support for enforcing signature policy and payload verification step to\n  transactions (jsc#SLE-17817)\n- Added :humansi and :hmaniec query formatters for human readable output\n- Added query selectors for whatobsoletes and whatconflicts\n- Added support for sorting caret higher than base version\n- rpm does no longer require the signature header to be in a contiguous\n  region when signing (bsc#1181805)\n\nSecurity fixes:\n\n- CVE-2021-3421: A flaw was found in the RPM package in the read functionality. This flaw allows an\n  attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM\n  repository, to cause RPM database corruption. The highest threat from this vulnerability is to\n  data integrity (bsc#1183543)\n\n- CVE-2021-20271: A flaw was found in RPM's signature check functionality when reading a package file.\n  This flaw allows an attacker who can convince a victim to install a seemingly verifiable package,\n  whose signature header was modified, to cause RPM database corruption and execute code. The highest\n  threat from this vulnerability is to data integrity, confidentiality, and system availability (bsc#1183545)\n\n- CVE-2021-20266: A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker\n  who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability\n  is to system availability.\n","status":"published","published":"2021-08-12T18:06:48Z","modified":"2026-02-04T02:59:41.683552Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3444-1","title":"Security update for rpm","description":"This update for rpm fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-3421, CVE-2021-20271, CVE-2021-20266: Multiple header check improvements (bsc#1183543, bsc#1183545, bsc#1183632)\n- PGP hardening changes (bsc#1185299)\n- Fixed potential access of freed mem in ndb's glue code (bsc#1179416)\n\nMaintaince issues fixed:\n\n- Fixed zstd detection (bsc#1187670)\n- Added ndb rofs support (bsc#1188548)\n- Fixed deadlock when multiple rpm processes try tp acquire the database lock (bsc#1183659)\n","status":"published","published":"2021-10-15T07:03:27Z","modified":"2026-02-04T03:29:54.499225Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2022:3939-1","title":"Security update for rpm","description":"This update for rpm fixes the following issues:\n\n- Fixed PGP parsing bugs (bsc#1185299).\n- Fixed various format handling bugs (bsc#996280).\n- CVE-2021-3421: Fixed vulnerability where unsigned headers could be injected into the rpm database (bsc#1183543). \n- CVE-2021-20271: Fixed vulnerability where a corrupted rpm could corrupt the rpm database (bsc#1183545).\n- CVE-2021-20266: Fixed missing bounds check in hdrblobInit (bsc#1183632).\n\nBugfixes:\n\n- Fixed deadlock when multiple rpm processes tried to acquire the database lock (bsc#1183659).\n","status":"published","published":"2022-11-10T13:32:14Z","modified":"2026-02-04T02:15:30.378308Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-5273-1","title":"rpm vulnerabilities","description":"Demi M. Obenour discovered that RPM Package Manager incorrectly handled\ncertain files. An attacker could possibly use this issue to corrupt the\ndatabase and cause a denial of service. (CVE-2021-3421, CVE-2021-20271)\n\nDemi M. Obenour discovered that RPM Package Manager incorrectly handled\nmemory when processing certain data from the database. An attacker could\npossibly use this issue to cause a denial of service. This issue only\naffects Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2021-20266)\n","status":"published","published":"2022-07-21T06:56:30Z","modified":"2026-06-25T13:31:01.017658691Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}