Insufficient verification of data authenticity in rpm - CVE-2021-20271

Vulnerability identifier: #VU54477

CSH Severity: Medium

CVSS v4: 7.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-20271

CWE-ID: CWE-345

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to an error in RPM's signature check functionality when reading package files. A remote attacker can create a specially crafted package with a modified signature header, trick the victim into installing and compromise the affected system.

rpm
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Module for SUSE Manager Server
SUSE Linux Enterprise Module for SUSE Manager Proxy
SUSE MicroOS
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux Server
CentOS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
IBM AIX
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Linux Enterprise Server
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Module for Python2
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Public Cloud
SUSE Linux Enterprise Module for Development Tools
openEuler
Fedora
Migration Toolkit for Containers
Traffix SDC
Cloud Pak for Security (CP4S)
Red Hat OpenShift Jaeger
IBM VIOS
IBM QRadar Network Security
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
rpm
rpm-debuginfo
rpm-debugsource
rpm-devel
python3-rpm
python3-rpm-debuginfo
python3-rpm-debugsource
rpm-build
rpm-build-debuginfo
rpm-python
rpm-python-debuginfo
rpm-python-debugsource
rpm-32bit
rpm-debuginfo-32bit
rpm (Red Hat package)
python-rpm-debugsource
python2-rpm-debuginfo
python2-rpm
rpm-32bit-debuginfo
rpm-ndb-debugsource
rpm-ndb-debuginfo
rpm-ndb
rpm-plugin-systemd-inhibit
rpm-build-libs
rpm-libs
rpm-plugin-ima
rpm-plugin-prioreset
rpm-plugin-selinux
rpm-plugin-syslog
rpm-sign
rpm-apidocs
rpm-cron
rpm-help
Web Terminal
Red Hat Advanced Cluster Management for Kubernetes
Session Smart Router
OpenShift Virtualization
Dell EMC NetWorker vProxy
RecoverPoint for VMs
XtremIO X2
Juniper Junos Space

Install updates from vendor's website.

rpm - update to 4.16.1.3
Migration Toolkit for Containers - addressed in versions 1.4.6, 1.5.1
Cloud Pak for Security (CP4S) - update to 1.8.0.0
Red Hat OpenShift Jaeger - addressed in versions 1.20.5, 1.24.0
IBM QRadar Network Security - addressed in versions 5.4.0.16, 5.5.0.11
Web Terminal - update to 1.3
Red Hat Advanced Cluster Management for Kubernetes - update to 2.2.10
OpenShift Virtualization - addressed in versions 2.6.6, 4.8.0, 4.8.1
Dell EMC NetWorker vProxy - update to 4.3.0-40
rpm - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
rpm-debuginfo - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
rpm-debugsource - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
rpm-devel - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
python3-rpm - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.1, 4.14.3-37.2
python3-rpm-debuginfo - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.1, 4.14.3-37.2
python3-rpm-debugsource - update to 4.11.2-16.26.1
rpm-build - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
rpm-build-debuginfo - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
rpm-python - update to 4.11.2-16.26.1
rpm-python-debuginfo - update to 4.11.2-16.26.1
rpm-python-debugsource - update to 4.11.2-16.26.1
rpm-32bit - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
rpm-debuginfo-32bit - update to 4.11.2-16.26.1
rpm (Red Hat package) - addressed in versions 4.11.3-35.el7_6.2, 4.11.3-40.el7_7.1, 4.11.3-48.el7_9, 4.14.2-38.el8_2, 4.14.3-14.el8_4
python-rpm-debugsource - addressed in versions 4.14.1-22.4.1, 4.14.3-37.2
python2-rpm-debuginfo - addressed in versions 4.14.1-22.4.1, 4.14.3-37.2
python2-rpm - addressed in versions 4.14.1-22.4.1, 4.14.3-37.2
rpm-32bit-debuginfo - addressed in versions 4.14.1-22.4.2, 4.14.3-37.2
rpm-ndb-debugsource - addressed in versions 4.14.1-22.4.2, 4.14.3-37.2
rpm-ndb-debuginfo - addressed in versions 4.14.1-22.4.2, 4.14.3-37.2
rpm-ndb - addressed in versions 4.14.1-22.4.2, 4.14.3-37.2
python3-rpm - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-plugin-systemd-inhibit - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-build - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-build-libs - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-devel - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-libs - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-plugin-ima - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-plugin-prioreset - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-plugin-selinux - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-plugin-syslog - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-sign - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-apidocs - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-cron - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm - addressed in versions 4.15.1.1-1.fc32.1, 4.16.1.3-1.fc33, 4.16.1.3-1.fc34
rpm-devel - update to 4.15.1-20
rpm-debugsource - update to 4.15.1-20
rpm-debuginfo - update to 4.15.1-20
python2-rpm - update to 4.15.1-20
python3-rpm - update to 4.15.1-20
rpm-libs - update to 4.15.1-20
rpm-build - update to 4.15.1-20
rpm - update to 4.15.1-20
rpm-help - update to 4.15.1-20
Session Smart Router - addressed in versions 5.4.7, 5.5.3
RecoverPoint for VMs - update to 6.0.SP1.P1
XtremIO X2 - update to 6.4.1-11
Juniper Junos Space - update to 22.1R1

• https://github.com/rpm-software-management/rpm/commit/d6a86b5e69e46cc283b1e06c92343319beb42e21
• https://bugzilla.redhat.com/show_bug.cgi?id=1934125
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YILPBTPSBRYL4POBI3F4YUSVPSOQNJBY/

• Multiple vulnerabilities in RPM software manager
• Red Hat Enterprise Linux 8 update for rpm
• Amazon Linux AMI update for rpm
• Gentoo update for RPM
• Red Hat Enterprise Linux 8.2 update for rpm
• Multiple vulnerabilities in Red Hat OpenShift Jaeger
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers
• Multiple vulnerabilities in Red Hat OpenShift Jaeger
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers
• Multiple vulnerabilities in Red Hat Web Terminal
• Red Hat Enterprise Linux 7 update for rpm
• Red Hat Enterprise Linux 7.6 update for rpm
• CentOS 7 update for rpm
• Red Hat Enterprise Linux 7.7 update for rpm
• Origin validation error in Traffix SDC (Linux RPM files)
• SUSE update for rpm
• SUSE update for rpm
• Insufficient verification of data authenticity in IBM QRadar Network Security
• Multiple vulnerabilities in Junos Space
• Multiple vulnerabilities in IBM Cloud Pak for Security
• Multiple vulnerabilities in IBM AIX
• Multiple vulnerabilities in IBM VIOS
• Multiple vulnerabilities in Juniper Networks Session Smart Router
• SUSE update for rpm
• Multiple vulnerabilities in Dell XtremIO X2
• Multiple vulnerabilities in Dell NetWorker vProxy
• openEuler 20.03 LTS SP1 update for rpm
• Multiple vulnerabilities in OpenShift Virtualization 4.8
• Multiple vulnerabilities in OpenShift Virtualization 2.6
• Multiple vulnerabilities in OpenShift Virtualization 4.8
• Fedora 34 update for rpm
• Fedora 33 update for rpm
• Fedora 32 update for rpm
• Multiple vulnerabilities in Dell RecoverPoint for Virtual Machines
• Anolis OS update for rpm (Anolis OS 8.4)
• Anolis OS update for rpm (Anolis OS 8.2)
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.2