CVE-2021-3445
MediumAdvisory
Published 16 Sept 2024In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.4
- base score, highest
- EPSS
- 0.011
- 64th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 38
- of 17,781 indexed, latest versions
- Container images
- 46
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: dnf security and bug fix update
Carried by container images the latest versions of 38 of 17,781 indexed charts deploy, on 46 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libdnfrpm | 0.22.5-5.el8_0, 0.35.1-9.el8_1, 0.39.1-5.el8, 0.39.1-6.el8_2+3 more | 0:0.63.0-3.el8 | 46 |
| dnfrpm | 4.2.7-7.el8_1, 4.2.17-7.el8_2, 4.2.23-4.el8, 4.4.2-11.el8 | 0:4.7.0-4.el8 | 30 |
| dnf-plugins-corerpm | 4.0.8-3.el8, 4.0.12-3.el8, 4.0.12-4.el8_2, 4.0.17-5.el8+1 more | 0:4.0.21-3.el8 | 22 |
- OSV records
- RHSA-2021:4464
Charts affected
38 by stars
Container images carrying it
46 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| minio/ | bd11edda91f3 | libdnf | 0:0.63.0-3.el8 | 3 |
| quay.io/ | d8c631a6dc43 | libdnf | 0:0.63.0-3.el8 | 2 |
| quay.io/ | 464a3af4dfe0 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 2 |
| quay.io/ | bb5e052770e5 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 2 |
| anchore/ | bde9eedf639d | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| anchore/ | ed9b3badd17c | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| apicurio/ | a97d67487532 | libdnf | 0:0.63.0-3.el8 | 1 |
| bsgrigorov/ | 45ab095f09c8 | libdnf | 0:0.63.0-3.el8 | 1 |
| cockroachdb/ | 983312754620 | dnf libdnf | 0:4.7.0-4.el8 0:0.63.0-3.el8 | 1 |
| confluentinc/ | f2975d507a2a | dnf libdnf | 0:4.7.0-4.el8 0:0.63.0-3.el8 | 1 |
| confluentinc/ | 8f1544df1f48 | dnf libdnf | 0:4.7.0-4.el8 0:0.63.0-3.el8 | 1 |
| confluentinc/ | 4bc70a83ca6f | dnf libdnf | 0:4.7.0-4.el8 0:0.63.0-3.el8 | 1 |
| confluentinc/ | b0b7aa26254a | dnf libdnf | 0:4.7.0-4.el8 0:0.63.0-3.el8 | 1 |
| confluentinc/ | ee403d5b9090 | dnf libdnf | 0:4.7.0-4.el8 0:0.63.0-3.el8 | 1 |
| confluentinc/ | b651d4b6185a | dnf libdnf | 0:4.7.0-4.el8 0:0.63.0-3.el8 | 1 |
| confluentinc/ | 78c190f4472c | dnf libdnf | 0:4.7.0-4.el8 0:0.63.0-3.el8 | 1 |
| craftypath/ | 402a0024c732 | libdnf | 0:0.63.0-3.el8 | 1 |
| ctron/ | 8fdea8f76499 | libdnf | 0:0.63.0-3.el8 | 1 |
| datawire/ | f95ae710d75c | libdnf | 0:0.63.0-3.el8 | 1 |
| ibmcom/ | c796a4c693b4 | libdnf | 0:0.63.0-3.el8 | 1 |
| ibmcom/ | 9c73804b37a3 | libdnf | 0:0.63.0-3.el8 | 1 |
| ibmcom/ | d28bf361327a | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| ibmcom/ | cd5065df7304 | libdnf | 0:0.63.0-3.el8 | 1 |
| minio/ | 2a374c124d44 | libdnf | 0:0.63.0-3.el8 | 1 |
| minio/ | 2adc5be088f5 | libdnf | 0:0.63.0-3.el8 | 1 |
| pnnlmiscscripts/ | 155131891741 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| seldonio/ | 4e985d2006a8 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| ghcr.io/ | 0cf25ed621e2 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| ghcr.io/ | 0635f17c9d2c | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| ghcr.io/ | e34964e336c1 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| ghcr.io/ | 0c5a3398d1e4 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| ghcr.io/ | 8ba040e79ca0 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| ghcr.io/ | 8caf5289fe73 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| quay.io/ | cdefc81c6b2e | libdnf | 0:0.63.0-3.el8 | 1 |
| quay.io/ | 10df27bc5560 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| quay.io/ | a3b9a07648b6 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| quay.io/ | ea838e5b4051 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| quay.io/ | 7a4b9fedc724 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| quay.io/ | 3029dc0f1d38 | libdnf | 0:0.63.0-3.el8 | 1 |
| quay.io/ | c2851757eca4 | libdnf | 0:0.63.0-3.el8 | 1 |
| quay.io/ | 107a7c73af59 | libdnf | 0:0.63.0-3.el8 | 1 |
| quay.io/ | 6722d5041b47 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| quay.io/ | 0bbe8b451fa3 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| quay.io/ | 89ee6493af89 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| quay.io/ | 6ba82beff18e | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |
| registry.gitlab.com/ | cf72810d33f5 | dnf dnf-plugins-core libdnf | 0:4.7.0-4.el8 0:4.0.21-3.el8 0:0.63.0-3.el8 | 1 |