Improper Verification of Cryptographic Signature in rpm - CVE-2021-3521

Vulnerability identifier: #VU59993

CSH Severity: Medium

CVSS v4: 9.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-3521

CWE-ID: CWE-347

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to an error in RPM's signature functionality, as RPM does not check the binding signature of subkeys before importing them. A remote attacker with ability to add malicious subkey to a legitimate public key can run malicious code on the system.

rpm
Gentoo Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy Module
SUSE Manager Proxy
SUSE Manager Server Module
openSUSE Leap Micro
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Public Cloud Module
SUSE Linux Enterprise Server 15 SP4 LTSS
Python 3 Module
Basesystem Module
Development Tools Module
openSUSE Leap
openEuler
Red Hat OpenShift Serverless
IBM Supplied MQ Advanced Queue Manager Container images
Red Hat OpenShift GitOps
Service Telemetry Framework
Netcool Operations Insight
IBM Robotic Process Automation
IBM MQ Operator
Red Hat Advanced Cluster Management for Kubernetes
Red Hat OpenStack
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
Cloud Pak for Security (CP4S)
Red Hat OpenShift Container Platform
Migration Toolkit for Containers
rpm (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
rpm-cron
python3-rpm
rpm
rpm-build
rpm-build-libs
rpm-devel
rpm-libs
rpm-plugin-ima
rpm-plugin-prioreset
rpm-plugin-selinux
rpm-plugin-syslog
rpm-plugin-systemd-inhibit
rpm-sign
rpm-apidocs
python-rpm-debugsource
python311-rpm-debuginfo
python311-rpm
rpm-build-debuginfo
rpm-debuginfo
rpm-debugsource
rpm-ndb-64bit-debuginfo
rpm-ndb-64bit
rpm-64bit-debuginfo
rpm-ndb-32bit
python3-rpm-debuginfo
rpm-32bit
rpm-32bit-debuginfo
rpm-ndb
rpm-ndb-debugsource
rpm-ndb-debuginfo
rpm-imaevmsign
rpm-imaevmsign-debuginfo
rpm-64bit
rpm-ndb-32bit-debuginfo
python2-rpm
rpm-help
app-arch/rpm
OpenShift API for Data Protection (OADP)
Dell EMC Storage Monitoring and Reporting (SMR)
Storage Resource Manager
Dell EMC VxRail Appliance

Install update from vendor's website.

Red Hat OpenShift Serverless - update to 1.21.0
Red Hat OpenShift GitOps - addressed in versions 1.3.4, 1.4
Netcool Operations Insight - update to 1.6.4
Cloud Pak for Security (CP4S) - update to 1.10.7.0
Red Hat OpenShift Container Platform - addressed in versions 4.7.43, 4.8.31
rpm (Red Hat package) - addressed in versions 4.14.2-40.el8_2, 4.14.3-14.el8_4.2, 4.14.3-19.el8_5.2
IBM Robotic Process Automation - update to 21.0.2.2
OpenShift API for Data Protection (OADP) - update to 1.0.1
IBM MQ Operator - addressed in versions 1.3.3, 1.8.0
Migration Toolkit for Containers - update to 1.5.4
Red Hat Advanced Cluster Management for Kubernetes - update to 2.3.6
rpm-cron - update to 4.14.3-19.0.2
python3-rpm - update to 4.14.3-19.0.2
rpm - update to 4.14.3-19.0.2
rpm-build - update to 4.14.3-19.0.2
rpm-build-libs - update to 4.14.3-19.0.2
rpm-devel - update to 4.14.3-19.0.2
rpm-libs - update to 4.14.3-19.0.2
rpm-plugin-ima - update to 4.14.3-19.0.2
rpm-plugin-prioreset - update to 4.14.3-19.0.2
rpm-plugin-selinux - update to 4.14.3-19.0.2
rpm-plugin-syslog - update to 4.14.3-19.0.2
rpm-plugin-systemd-inhibit - update to 4.14.3-19.0.2
rpm-sign - update to 4.14.3-19.0.2
rpm-apidocs - update to 4.14.3-19.0.2
python-rpm-debugsource - update to 4.14.3-150400.59.16.1
rpm - update to 4.14.3-150400.59.16.1
python311-rpm-debuginfo - update to 4.14.3-150400.59.16.1
rpm-build - update to 4.14.3-150400.59.16.1
python311-rpm - update to 4.14.3-150400.59.16.1
rpm-devel - update to 4.14.3-150400.59.16.1
rpm-build-debuginfo - update to 4.14.3-150400.59.16.1
rpm-debuginfo - update to 4.14.3-150400.59.16.1
rpm-debugsource - update to 4.14.3-150400.59.16.1
python3-rpm - update to 4.14.3-150400.59.16.1
rpm-ndb-64bit-debuginfo - update to 4.14.3-150400.59.16.1
rpm-ndb-64bit - update to 4.14.3-150400.59.16.1
rpm-64bit-debuginfo - update to 4.14.3-150400.59.16.1
rpm-ndb-32bit - update to 4.14.3-150400.59.16.1
python3-rpm-debuginfo - update to 4.14.3-150400.59.16.1
rpm-32bit - update to 4.14.3-150400.59.16.1
rpm-32bit-debuginfo - update to 4.14.3-150400.59.16.1
rpm-ndb - update to 4.14.3-150400.59.16.1
rpm-ndb-debugsource - update to 4.14.3-150400.59.16.1
rpm-ndb-debuginfo - update to 4.14.3-150400.59.16.1
rpm-imaevmsign - update to 4.14.3-150400.59.16.1
rpm-imaevmsign-debuginfo - update to 4.14.3-150400.59.16.1
rpm-64bit - update to 4.14.3-150400.59.16.1
rpm-ndb-32bit-debuginfo - update to 4.14.3-150400.59.16.1
python2-rpm - update to 4.15.1-26
python3-rpm - update to 4.15.1-26
rpm-plugin-systemd-inhibit - update to 4.15.1-26
rpm-libs - update to 4.15.1-26
rpm-debugsource - update to 4.15.1-26
rpm - update to 4.15.1-26
rpm-devel - update to 4.15.1-26
rpm-build - update to 4.15.1-26
rpm-debuginfo - update to 4.15.1-26
rpm-help - update to 4.15.1-26
app-arch/rpm - update to 4.18.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
Storage Resource Manager - update to 5.0.1.0
Dell EMC VxRail Appliance - update to 8.0.212
IBM Supplied MQ Advanced Queue Manager Container images - addressed in versions 9.2.0.5-r1-eus, 9.2.5.0-r1
Red Hat OpenStack - update to 16.2

• https://github.com/rpm-software-management/rpm/pull/1788
• https://bugzilla.redhat.com/show_bug.cgi?id=1941098

• Improper verification of vryptographic signature in rpm
• Red Hat Enterprise Linux 8 update for rpm
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in OpenShift Container Platform 4.7
• Multiple vulnerabilities in OpenShift Container Platform 4.8
• Multiple vulnerabilities in OpenShift Container Platform 4.7
• Red Hat Enterprise Linux 8.2 update for rpm
• Multiple vulnerabilities in Red Hat Service Telemetry Framework
• Multiple vulnerabilities in OpenShift Serverless
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Function Cloud Native Environment
• Multiple vulnerabilities in IBM Netcool Operations Insight
• Multiple vulnerabilities in Red Hat Service Telemetry Framework
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Red Hat Enterprise Linux 8 update for rpm
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• openEuler update for rpm
• SUSE update for rpm
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.0
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.3
• Multiple vulnerabilities in Red Hat OpenStack 16.2 packages
• Multiple vulnerabilities in Migration Toolkit for Containers 1.5
• Gentoo update for RPM
• Multiple vulnerabilities in IBM MQ Operator and IBM supplied MQ Advanced container images
• Anolis OS update for rpm