SUSE update for rpm
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 3 |
| CVE-ID | CVE-2021-20266 CVE-2021-20271 CVE-2021-3421 |
| CWE-ID | CWE-125 CWE-345 CWE-347 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
SUSE Linux Enterprise Module for SUSE Manager Proxy Operating systems & Components / Operating system SUSE Linux Enterprise Module for Public Cloud Operating systems & Components / Operating system SUSE Linux Enterprise Module for Python2 Operating systems & Components / Operating system SUSE Linux Enterprise Module for SUSE Manager Server Operating systems & Components / Operating system SUSE MicroOS Operating systems & Components / Operating system SUSE Linux Enterprise Module for Development Tools Operating systems & Components / Operating system SUSE Linux Enterprise Module for Basesystem Operating systems & Components / Operating system rpm-32bit-debuginfo Operating systems & Components / Operating system package or component rpm-32bit Operating systems & Components / Operating system package or component rpm-devel Operating systems & Components / Operating system package or component rpm-ndb-debugsource Operating systems & Components / Operating system package or component rpm-ndb-debuginfo Operating systems & Components / Operating system package or component rpm-ndb Operating systems & Components / Operating system package or component python2-rpm-debuginfo Operating systems & Components / Operating system package or component python2-rpm Operating systems & Components / Operating system package or component rpm-build-debuginfo Operating systems & Components / Operating system package or component rpm-build Operating systems & Components / Operating system package or component rpm-debugsource Operating systems & Components / Operating system package or component rpm-debuginfo Operating systems & Components / Operating system package or component rpm Operating systems & Components / Operating system package or component python3-rpm-debuginfo Operating systems & Components / Operating system package or component python3-rpm Operating systems & Components / Operating system package or component python-rpm-debugsource Operating systems & Components / Operating system package or component |
| Vendor | SUSE |
Security Bulletin
This security bulletin contains information about 3 vulnerabilities.
1) Out-of-bounds read
EUVDB-ID: #VU54478
Risk: Low
CVSSv4.0: 0.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-20266
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition within the hdrblobInit() function in lib/header.c. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.
MitigationUpdate the affected package rpm to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Module for Public Cloud: 15-SP2
SUSE Linux Enterprise Module for Python2: 15-SP2
SUSE Linux Enterprise Module for SUSE Manager Server: 4.1
SUSE MicroOS: 5.0
SUSE Linux Enterprise Module for Development Tools: 15-SP2
SUSE Linux Enterprise Module for Basesystem: 15-SP2
rpm-32bit-debuginfo: before 4.14.1-22.4.2
rpm-32bit: before 4.14.1-22.4.2
rpm-devel: before 4.14.1-22.4.2
rpm-ndb-debugsource: before 4.14.1-22.4.2
rpm-ndb-debuginfo: before 4.14.1-22.4.2
rpm-ndb: before 4.14.1-22.4.2
python2-rpm-debuginfo: before 4.14.1-22.4.1
python2-rpm: before 4.14.1-22.4.1
rpm-build-debuginfo: before 4.14.1-22.4.2
rpm-build: before 4.14.1-22.4.2
rpm-debugsource: before 4.14.1-22.4.2
rpm-debuginfo: before 4.14.1-22.4.2
rpm: before 4.14.1-22.4.2
python3-rpm-debuginfo: before 4.14.1-22.4.1
python3-rpm: before 4.14.1-22.4.1
python-rpm-debugsource: before 4.14.1-22.4.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_module_for_suse_manager_proxy:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_public_cloud:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_python2:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_suse_manager_server:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_microos:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_development_tools:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:a:suse:rpm-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-ndb-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-ndb-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-ndb:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python2-rpm-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python2-rpm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-build-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rpm-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rpm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python-rpm-debugsource:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20213444-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Insufficient verification of data authenticity
EUVDB-ID: #VU54477
Risk: Medium
CVSSv4.0: 4.8 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2021-20271
CWE-ID:
CWE-345 - Insufficient Verification of Data Authenticity
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to an error in RPM's signature check functionality when reading package files. A remote attacker can create a specially crafted package with a modified signature header, trick the victim into installing and compromise the affected system.
Update the affected package rpm to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Module for Public Cloud: 15-SP2
SUSE Linux Enterprise Module for Python2: 15-SP2
SUSE Linux Enterprise Module for SUSE Manager Server: 4.1
SUSE MicroOS: 5.0
SUSE Linux Enterprise Module for Development Tools: 15-SP2
SUSE Linux Enterprise Module for Basesystem: 15-SP2
rpm-32bit-debuginfo: before 4.14.1-22.4.2
rpm-32bit: before 4.14.1-22.4.2
rpm-devel: before 4.14.1-22.4.2
rpm-ndb-debugsource: before 4.14.1-22.4.2
rpm-ndb-debuginfo: before 4.14.1-22.4.2
rpm-ndb: before 4.14.1-22.4.2
python2-rpm-debuginfo: before 4.14.1-22.4.1
python2-rpm: before 4.14.1-22.4.1
rpm-build-debuginfo: before 4.14.1-22.4.2
rpm-build: before 4.14.1-22.4.2
rpm-debugsource: before 4.14.1-22.4.2
rpm-debuginfo: before 4.14.1-22.4.2
rpm: before 4.14.1-22.4.2
python3-rpm-debuginfo: before 4.14.1-22.4.1
python3-rpm: before 4.14.1-22.4.1
python-rpm-debugsource: before 4.14.1-22.4.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_module_for_suse_manager_proxy:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_public_cloud:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_python2:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_suse_manager_server:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_microos:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_development_tools:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:a:suse:rpm-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-ndb-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-ndb-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-ndb:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python2-rpm-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python2-rpm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-build-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rpm-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rpm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python-rpm-debugsource:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20213444-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Improper Verification of Cryptographic Signature
EUVDB-ID: #VU54479
Risk: Medium
CVSSv4.0: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2021-3421
CWE-ID:
CWE-347 - Improper Verification of Cryptographic Signature
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service attack.
The vulnerability exists due to insufficient signature validation in the read functionality n the RPM package. A remote attacker can trick the victim into installing a seemingly verifiable package and cause RPM database corruption.
MitigationUpdate the affected package rpm to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Module for Public Cloud: 15-SP2
SUSE Linux Enterprise Module for Python2: 15-SP2
SUSE Linux Enterprise Module for SUSE Manager Server: 4.1
SUSE MicroOS: 5.0
SUSE Linux Enterprise Module for Development Tools: 15-SP2
SUSE Linux Enterprise Module for Basesystem: 15-SP2
rpm-32bit-debuginfo: before 4.14.1-22.4.2
rpm-32bit: before 4.14.1-22.4.2
rpm-devel: before 4.14.1-22.4.2
rpm-ndb-debugsource: before 4.14.1-22.4.2
rpm-ndb-debuginfo: before 4.14.1-22.4.2
rpm-ndb: before 4.14.1-22.4.2
python2-rpm-debuginfo: before 4.14.1-22.4.1
python2-rpm: before 4.14.1-22.4.1
rpm-build-debuginfo: before 4.14.1-22.4.2
rpm-build: before 4.14.1-22.4.2
rpm-debugsource: before 4.14.1-22.4.2
rpm-debuginfo: before 4.14.1-22.4.2
rpm: before 4.14.1-22.4.2
python3-rpm-debuginfo: before 4.14.1-22.4.1
python3-rpm: before 4.14.1-22.4.1
python-rpm-debugsource: before 4.14.1-22.4.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_module_for_suse_manager_proxy:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_public_cloud:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_python2:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_suse_manager_server:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_microos:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_development_tools:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:a:suse:rpm-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-ndb-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-ndb-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-ndb:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python2-rpm-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python2-rpm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-build-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-build:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rpm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rpm-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rpm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python-rpm-debugsource:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20213444-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
