CVE-2021-3421

概要

参考情報

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YILPBTPSBRYL4POBI3F4YUSVPSOQNJBY
• security.gentoo.org/glsa/202107-43 · Third Party Advisory

rpm のその他の脆弱性

• CVE-2021-35939中 6.7It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the…
• CVE-2021-35938中 6.7A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unp…
• CVE-2021-35937中 6.4A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in …
• CVE-2021-3521中 4.7There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a "binding signature." RPM does not …
• CVE-2021-20266中 4.9A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds rea…