CVE-2021-3421

A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects RPM versions before 4.17.0-alpha.

• CWE-347

• https://bugzilla.redhat.com/show_bug.cgi?id=1927747Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YILPBTPSBRYL4POBI3F4YUSVPSOQNJBY/
• https://security.gentoo.org/glsa/202107-43Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1927747Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YILPBTPSBRYL4POBI3F4YUSVPSOQNJBY/
• https://security.gentoo.org/glsa/202107-43Third Party Advisory

Published

May 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3420A flaw was found in newlib in versions prior to 4.0.0. Impro…9.8
• CVE-2021-34201D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow.…7.1
• CVE-2021-34202There are multiple out-of-bounds vulnerabilities in some pro…7.8
• CVE-2021-34203D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access…8.1
• CVE-2021-34204D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Pro…6.8
• CVE-2021-34207Cross-site scripting in ddns.htm in TOTOLINK A3002R version …6.1
• CVE-2021-34215Cross-site scripting in tcpipwan.htm in TOTOLINK A3002R vers…6.1
• CVE-2021-34218Directory Indexing in Login Portal of Login Portal of TOTOLI…5.3
• CVE-2021-3422The lack of validation of a key-value field in the Splunk-to…7.5
• CVE-2021-34220Cross-site scripting in tr069config.htm in TOTOLINK A3002R v…6.1
• CVE-2021-34223Cross-site scripting in urlfilter.htm in TOTOLINK A3002R ver…6.1
• CVE-2021-34228Cross-site scripting in parent_control.htm in TOTOLINK A3002…6.1