CVE-2021-20271: High severity ibm cloud pak for security vulnerability
A flaw was found in rpm. Given an RPM package signed by a trusted key, it is possible to modify it such that it still passes signature checks, but installing it corrupts the rpmdb.
Other sources
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.
— MITRE
RPM could allow a remote attacker to execute arbitrary code on the system, caused by a flaw in the signature check function. By persuading a victim to open a specially-crafted package file, an attacker could exploit this vulnerability to cause RPM database corruption and execute arbitrary code on the system.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-20271?
CVE-2021-20271 is a vulnerability in RPM that could allow a remote attacker to execute arbitrary code on the system.
What is the severity of CVE-2021-20271?
CVE-2021-20271 has a severity rating of high with a CVSS score of 7.
Which software products are affected by CVE-2021-20271?
Cloud Pak for Security (CP4S) versions 1.7.2.0, 1.7.1.0, and 1.7.0.0 are affected by CVE-2021-20271. Additionally, RPM versions 4.15.0 to 4.15.1.3 and 4.16.0 to 4.16.1.3 are also affected.
How can an attacker exploit CVE-2021-20271?
An attacker can exploit CVE-2021-20271 by convincing a victim to install a seemingly verifiable package with a modified signature header, which can lead to RPM database corruption and code execution.
How can I fix CVE-2021-20271?
To fix CVE-2021-20271, it is recommended to update to a patched version of RPM or apply the relevant security patch provided by the vendor.