PatchTheCVECVE-2021-3421: A flaw was found in the RPM package in the read functionality
CVE-2021-3421 is a medium-severity flaw (CVSS 5.5) affecting rpm, enterprise linux, fedora. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha.
Why this priority
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.5 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.6% (top 49%) |
| CISA exploited list | No |
| Weakness | CWE-347 |
| Published | 2021-05-19 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2021-3421?
rpm: upgrade to 4.16.1.3; enterprise linux: mitigate or apply the listed mitigation; fedora: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2021-3421 being exploited?
CVE-2021-3421 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2021-3421 affect?
CVE-2021-3421 affects rpm, enterprise linux, fedora. Severity is medium (CVSS 5.5). A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest t
How urgent is CVE-2021-3421?
Priority 37/100. On your watchlist
Related CVEs
- CVE-2021-3521 MEDIUM 4.7 UPGRADE There is a flaw in RPM's signature functionality
- CVE-2021-35939 MEDIUM 6.7 UPGRADE MITIGATE It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented f
- CVE-2021-35938 MEDIUM 6.7 UPGRADE MITIGATE A symbolic link issue was found in rpm
- CVE-2021-35937 MEDIUM 6.4 UPGRADE MITIGATE A race condition vulnerability was found in rpm
- CVE-2021-20271 HIGH 7.0 UPGRADE MITIGATE A flaw was found in RPM's signature check functionality when reading a package file