Improper Verification of Cryptographic Signature in rpm - CVE-2021-3421

Vulnerability identifier: #VU54479

CSH Severity: Medium

CVSS v4: 5.9 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-3421

CWE-ID: CWE-347

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to insufficient signature validation in the read functionality n the RPM package. A remote attacker can trick the victim into installing a seemingly verifiable package and cause RPM database corruption.

rpm
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Module for SUSE Manager Server
SUSE Linux Enterprise Module for SUSE Manager Proxy
SUSE MicroOS
IBM AIX
Anolis OS
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Module for Public Cloud
SUSE Linux Enterprise Module for Python2
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Basesystem
openEuler
Fedora
Cloud Pak for Security (CP4S)
IBM VIOS
Web Terminal
Dell EMC NetWorker vProxy
rpm-32bit
rpm-python-debugsource
rpm-python-debuginfo
rpm-python
rpm-build-debuginfo
rpm-build
rpm
python3-rpm-debugsource
python3-rpm-debuginfo
python3-rpm
rpm-devel
rpm-debugsource
rpm-debuginfo
rpm-debuginfo-32bit
python-rpm-debugsource
python2-rpm
python2-rpm-debuginfo
rpm-32bit-debuginfo
rpm-ndb-debugsource
rpm-ndb-debuginfo
rpm-ndb
rpm-cron
rpm-apidocs
rpm-sign
rpm-plugin-systemd-inhibit
rpm-plugin-syslog
rpm-plugin-selinux
rpm-plugin-prioreset
rpm-plugin-ima
rpm-libs
rpm-build-libs
rpm-help
RecoverPoint for VMs

Install updates from vendor's website.

rpm - update to 4.17.0 alpha
Cloud Pak for Security (CP4S) - update to 1.8.0.0
Web Terminal - update to 1.3
Dell EMC NetWorker vProxy - update to 4.3.0-40
rpm-32bit - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
rpm-python-debugsource - update to 4.11.2-16.26.1
rpm-python-debuginfo - update to 4.11.2-16.26.1
rpm-python - update to 4.11.2-16.26.1
rpm-build-debuginfo - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
rpm-build - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
rpm - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
python3-rpm-debugsource - update to 4.11.2-16.26.1
python3-rpm-debuginfo - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.1, 4.14.3-37.2
python3-rpm - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.1, 4.14.3-37.2
rpm-devel - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
rpm-debugsource - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
rpm-debuginfo - addressed in versions 4.11.2-16.26.1, 4.14.1-22.4.2, 4.14.3-37.2
rpm-debuginfo-32bit - update to 4.11.2-16.26.1
python-rpm-debugsource - addressed in versions 4.14.1-22.4.1, 4.14.3-37.2
python2-rpm - addressed in versions 4.14.1-22.4.1, 4.14.3-37.2
python2-rpm-debuginfo - addressed in versions 4.14.1-22.4.1, 4.14.3-37.2
rpm-32bit-debuginfo - addressed in versions 4.14.1-22.4.2, 4.14.3-37.2
rpm-ndb-debugsource - addressed in versions 4.14.1-22.4.2, 4.14.3-37.2
rpm-ndb-debuginfo - addressed in versions 4.14.1-22.4.2, 4.14.3-37.2
rpm-ndb - addressed in versions 4.14.1-22.4.2, 4.14.3-37.2
rpm-cron - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-apidocs - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-sign - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-plugin-systemd-inhibit - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-plugin-syslog - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-plugin-selinux - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-plugin-prioreset - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-plugin-ima - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-libs - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-devel - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-build-libs - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm-build - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm - addressed in versions 4.14.2-38, 4.14.3-14.0.1
python3-rpm - addressed in versions 4.14.2-38, 4.14.3-14.0.1
rpm - addressed in versions 4.15.1.1-1.fc32.1, 4.16.1.3-1.fc33, 4.16.1.3-1.fc34
rpm-help - update to 4.15.1-24
rpm-debuginfo - update to 4.15.1-24
rpm-debugsource - update to 4.15.1-24
python2-rpm - update to 4.15.1-24
rpm-devel - update to 4.15.1-24
python3-rpm - update to 4.15.1-24
rpm-libs - update to 4.15.1-24
rpm-build - update to 4.15.1-24
rpm - update to 4.15.1-24
RecoverPoint for VMs - update to 6.0.SP1.P1

• https://bugzilla.redhat.com/show_bug.cgi?id=1927747
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YILPBTPSBRYL4POBI3F4YUSVPSOQNJBY/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/

• Denial of service in RPM software manager
• Amazon Linux AMI update for rpm
• Gentoo update for RPM
• Multiple vulnerabilities in Red Hat Web Terminal
• SUSE update for rpm
• SUSE update for rpm
• Multiple vulnerabilities in IBM Cloud Pak for Security
• Multiple vulnerabilities in IBM AIX
• Multiple vulnerabilities in IBM VIOS
• SUSE update for rpm
• Multiple vulnerabilities in Dell NetWorker vProxy
• openEuler 20.03 LTS SP1 update for rpm
• Fedora 34 update for rpm
• Fedora 33 update for rpm
• Fedora 32 update for rpm
• Multiple vulnerabilities in Dell RecoverPoint for Virtual Machines
• Anolis OS update for rpm (Anolis OS 8.4)
• Anolis OS update for rpm (Anolis OS 8.2)