SUSE update for rpm



Published: 2021-08-13
Risk Medium
Patch available YES
Number of vulnerabilities 3
CVE-ID CVE-2021-20266
CVE-2021-20271
CVE-2021-3421
CWE-ID CWE-125
CWE-345
CWE-347
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe
SUSE Linux Enterprise Module for Python2
Operating systems & Components / Operating system

SUSE Linux Enterprise Module for SUSE Manager Proxy
Operating systems & Components / Operating system

SUSE Linux Enterprise Module for SUSE Manager Server
Operating systems & Components / Operating system

SUSE Linux Enterprise Module for Public Cloud
Operating systems & Components / Operating system

SUSE Linux Enterprise Module for Development Tools
Operating systems & Components / Operating system

SUSE Linux Enterprise Module for Basesystem
Operating systems & Components / Operating system

rpm-32bit-debuginfo
Operating systems & Components / Operating system package or component

rpm-32bit
Operating systems & Components / Operating system package or component

rpm-devel
Operating systems & Components / Operating system package or component

rpm
Operating systems & Components / Operating system package or component

python3-rpm-debuginfo
Operating systems & Components / Operating system package or component

python3-rpm
Operating systems & Components / Operating system package or component

rpm-ndb-debugsource
Operating systems & Components / Operating system package or component

rpm-ndb-debuginfo
Operating systems & Components / Operating system package or component

rpm-ndb
Operating systems & Components / Operating system package or component

python2-rpm-debuginfo
Operating systems & Components / Operating system package or component

python2-rpm
Operating systems & Components / Operating system package or component

python-rpm-debugsource
Operating systems & Components / Operating system package or component

rpm-debugsource
Operating systems & Components / Operating system package or component

rpm-debuginfo
Operating systems & Components / Operating system package or component

rpm-build-debuginfo
Operating systems & Components / Operating system package or component

rpm-build
Operating systems & Components / Operating system package or component

Vendor SUSE

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Out-of-bounds read

EUVDB-ID: #VU54478

Risk: Low

CVSSv3.1: 3.7 [CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-20266

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the hdrblobInit() function in lib/header.c. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Update the affected package rpm to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Python2: 15-SP3

SUSE Linux Enterprise Module for SUSE Manager Proxy: 4.2

SUSE Linux Enterprise Module for SUSE Manager Server: 4.2

SUSE Linux Enterprise Module for Public Cloud: 15-SP3

SUSE Linux Enterprise Module for Development Tools: 15-SP3

SUSE Linux Enterprise Module for Basesystem: 15-SP3

rpm-32bit-debuginfo: before 4.14.3-37.2

rpm-32bit: before 4.14.3-37.2

rpm-devel: before 4.14.3-37.2

rpm: before 4.14.3-37.2

python3-rpm-debuginfo: before 4.14.3-37.2

python3-rpm: before 4.14.3-37.2

rpm-ndb-debugsource: before 4.14.3-37.2

rpm-ndb-debuginfo: before 4.14.3-37.2

rpm-ndb: before 4.14.3-37.2

python2-rpm-debuginfo: before 4.14.3-37.2

python2-rpm: before 4.14.3-37.2

python-rpm-debugsource: before 4.14.3-37.2

rpm-debugsource: before 4.14.3-37.2

rpm-debuginfo: before 4.14.3-37.2

rpm-build-debuginfo: before 4.14.3-37.2

rpm-build: before 4.14.3-37.2

External links

http://www.suse.com/support/update/announcement/2021/suse-su-20212682-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Insufficient verification of data authenticity

EUVDB-ID: #VU54477

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-20271

CWE-ID: CWE-345 - Insufficient Verification of Data Authenticity

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to an error in RPM's signature check functionality when reading package files. A remote attacker can create a specially crafted package with a modified signature header, trick the victim into installing and compromise the affected system.

Mitigation

Update the affected package rpm to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Python2: 15-SP3

SUSE Linux Enterprise Module for SUSE Manager Proxy: 4.2

SUSE Linux Enterprise Module for SUSE Manager Server: 4.2

SUSE Linux Enterprise Module for Public Cloud: 15-SP3

SUSE Linux Enterprise Module for Development Tools: 15-SP3

SUSE Linux Enterprise Module for Basesystem: 15-SP3

rpm-32bit-debuginfo: before 4.14.3-37.2

rpm-32bit: before 4.14.3-37.2

rpm-devel: before 4.14.3-37.2

rpm: before 4.14.3-37.2

python3-rpm-debuginfo: before 4.14.3-37.2

python3-rpm: before 4.14.3-37.2

rpm-ndb-debugsource: before 4.14.3-37.2

rpm-ndb-debuginfo: before 4.14.3-37.2

rpm-ndb: before 4.14.3-37.2

python2-rpm-debuginfo: before 4.14.3-37.2

python2-rpm: before 4.14.3-37.2

python-rpm-debugsource: before 4.14.3-37.2

rpm-debugsource: before 4.14.3-37.2

rpm-debuginfo: before 4.14.3-37.2

rpm-build-debuginfo: before 4.14.3-37.2

rpm-build: before 4.14.3-37.2

External links

http://www.suse.com/support/update/announcement/2021/suse-su-20212682-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Improper Verification of Cryptographic Signature

EUVDB-ID: #VU54479

Risk: Medium

CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-3421

CWE-ID: CWE-347 - Improper Verification of Cryptographic Signature

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to insufficient signature validation in the read functionality n the RPM package. A remote attacker can trick the victim into installing a seemingly verifiable package and cause RPM database corruption.

Mitigation

Update the affected package rpm to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Python2: 15-SP3

SUSE Linux Enterprise Module for SUSE Manager Proxy: 4.2

SUSE Linux Enterprise Module for SUSE Manager Server: 4.2

SUSE Linux Enterprise Module for Public Cloud: 15-SP3

SUSE Linux Enterprise Module for Development Tools: 15-SP3

SUSE Linux Enterprise Module for Basesystem: 15-SP3

rpm-32bit-debuginfo: before 4.14.3-37.2

rpm-32bit: before 4.14.3-37.2

rpm-devel: before 4.14.3-37.2

rpm: before 4.14.3-37.2

python3-rpm-debuginfo: before 4.14.3-37.2

python3-rpm: before 4.14.3-37.2

rpm-ndb-debugsource: before 4.14.3-37.2

rpm-ndb-debuginfo: before 4.14.3-37.2

rpm-ndb: before 4.14.3-37.2

python2-rpm-debuginfo: before 4.14.3-37.2

python2-rpm: before 4.14.3-37.2

python-rpm-debugsource: before 4.14.3-37.2

rpm-debugsource: before 4.14.3-37.2

rpm-debuginfo: before 4.14.3-37.2

rpm-build-debuginfo: before 4.14.3-37.2

rpm-build: before 4.14.3-37.2

External links

http://www.suse.com/support/update/announcement/2021/suse-su-20212682-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###