PT-2020-10012 · Suse+1 · Suse Linux Enterprise High Performance Computing 15-Ltss+8

Ivan Kapelyukhin · Publicado 2020-01-30 · Atualizado 2024-06-15 · CVE-2019-18904

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Nome do software vulnerável e versões afetadas

SUSE Linux Enterprise High Performance Computing 15-ESPOS: versões do rmt-server anteriores à 2.5.2-3.26.1

SUSE Linux Enterprise High Performance Computing 15-LTSS: versões do rmt-server anteriores à 2.5.2-3.26.1

SUSE Linux Enterprise Module for Public Cloud 15-SP1, versões do rmt-server anteriores à 2.5.2-3.9.1

SUSE Linux Enterprise Module for Server Applications 15, versões do rmt-server anteriores à 2.5.2-3.26.1

SUSE Linux Enterprise Module for Server Applications 15-SP1, versões do rmt-server anteriores à 2.5.2-3.9.1

SUSE Linux Enterprise Server 15-LTSS versões do rmt-server anteriores à 2.5.2-3.26.1

SUSE Linux Enterprise Server for SAP 15 versões do rmt-server anteriores à 2.5.2-3.26.1

openSUSE Leap 15.1 versões do rmt-server anteriores à 2.5.2-lp151.2.9.1

Descrição

Uma vulnerabilidade de consumo descontrolado de recursos no rmt permite que invasores remotos causem DoS contra o rmt solicitando migrações.

Recomendações

Atualize o rmt-server do SUSE Linux Enterprise High Performance Computing 15-ESPOS para a versão 2.5.2-3.26.1 ou posterior.

Atualize o rmt-server do SUSE Linux Enterprise High Performance Computing 15-LTSS para a versão 2.5.2-3.26.1 ou posterior.

Atualize o rmt-server do SUSE Linux Enterprise Module for Public Cloud 15-SP1 para a versão 2.5.2-3.9.1 ou posterior.

Atualize o rmt-server do SUSE Linux Enterprise Module for Server Applications 15 para a versão 2.5.2-3.26.1 ou posterior.

Atualize o rmt-server do SUSE Linux Enterprise Module for Server Applications 15-SP1 para a versão 2.5.2-3.9.1 ou posterior.

Atualize o SUS

Exploit

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2019-18904

OPENSUSE-SU-2020:0235-1

OPENSUSE-SU-2020_0235-1

OPENSUSE-SU-2024:10589-1

SUSE-SU-2020:0260-1

SUSE-SU-2020:0278-1

SUSE-SU-2020:1179-1

SUSE-SU-2020_0260-1

SUSE-SU-2020_0278-1

SUSE-SU-2020_1179-1

Produtos afetados

Suse Linux Enterprise High Performance Computing 15-Espos

Suse Linux Enterprise High Performance Computing 15-Ltss

Suse Linux Enterprise Module For Public Cloud 15-Sp1

Suse Linux Enterprise Module For Server Applications 15

Suse Linux Enterprise Module For Server Applications 15-Sp1

Suse Linux Enterprise Server 15

Suse Linux Enterprise Server For Sap 15

Suse

Opensuse Leap 15.1

Referências · 38

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=1160922 · Exploit
• https://osv.dev/vulnerability/CVE-2019-18904 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-11068 · Nota
• https://suse.com/security/cve/CVE-2018-16468 · Nota
• https://bugzilla.suse.com/1157119 · Nota
• https://bugzilla.suse.com/1160673 · Nota
• https://suse.com/security/cve/CVE-2020-8164 · Nota
• https://bugzilla.suse.com/1165548 · Nota
• https://suse.com/security/cve/CVE-2020-11076 · Nota
• https://suse.com/support/update/announcement/2020/suse-su-20200260-1 · Nota
• https://suse.com/security/cve/CVE-2020-8167 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/NDQBJNFWANV6TSPQYO64RQJGFMEBCGWR · Nota
• https://suse.com/security/cve/CVE-2018-16470 · Nota
• https://suse.com/security/cve/CVE-2020-8166 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-18904 · Nota de Segurança