CVE-2021-20266CWE-125

A flaw was found in RPM's hdrblobInit() in lib/header.c

published April 30, 2021

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01639 · 76.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2021-04-30T11:22Z
EPSS history
Timeline
  • 30 APR 11:22Z
    A flaw was found in RPM's hdrblobInit() in lib/header.c
    cvelistv5