CVE-2019-18904 Migrations requests can cause DoS on rmt
Remote attackers can cause denial of service against the SUSE RMT server by sending migration requests, requiring a patch to mitigate resource exhaustion.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-18904?
CVE-2019-18904 is a medium-severity denial of service vulnerability in SUSE Linux Enterprise High Performance Computing 15-ESPOS, published on 3 Apr 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A Uncontrolled Resource Consumption vulnerability in rmt of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Public Cloud 15-SP1, SUSE Linux Enterprise Module for Server Applications 15, SUSE Linux Enterprise Module for Server Applications 15-SP1, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1 allows remote attackers to cause DoS against rmt by requesting migrations. This issue affects: SUSE Linux Enterprise High Performance Computing 15-ESPOS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise High Performance Computing 15-LTSS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Module for Public Cloud 15-SP1 rmt-server versions prior to 2.5.2-3.9.1. SUSE Linux Enterprise Module for Server Applications 15 rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Module for Server Applications 15-SP1 rmt-server versions prior to 2.5.2-3.9.1. SUSE Linux Enterprise Server 15-LTSS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.5.2-3.26.1. openSUSE Leap 15.1 rmt-server versions prior to 2.5.2-lp151.2.9.1.
Weakness: CWE-400
Which versions are affected by CVE-2019-18904?
It affects 1 product.
Linux distribution packages (12)
rmt-server SUSE:Linux Enterprise High Performance Computing 15-ESPOS | All versions | 2.5.2-3.26.1 |
rmt-server SUSE:Linux Enterprise High Performance Computing 15-ESPOS | All versions | 2.5.7-3.31.1 |
rmt-server SUSE:Linux Enterprise High Performance Computing 15-LTSS | All versions | 2.5.2-3.26.1 |
rmt-server SUSE:Linux Enterprise High Performance Computing 15-LTSS | All versions | 2.5.7-3.31.1 |
rmt-server SUSE:Linux Enterprise Module for Public Cloud 15 SP1 | All versions | 2.5.2-3.9.1 |
rmt-server SUSE:Linux Enterprise Module for Server Applications 15 | All versions | 2.5.2-3.26.1 |
rmt-server SUSE:Linux Enterprise Module for Server Applications 15 SP1 | All versions | 2.5.2-3.9.1 |
rmt-server SUSE:Linux Enterprise Server 15-LTSS | All versions | 2.5.2-3.26.1 |
rmt-server SUSE:Linux Enterprise Server 15-LTSS | All versions | 2.5.7-3.31.1 |
rmt-server SUSE:Linux Enterprise Server for SAP Applications 15 | All versions | 2.5.2-3.26.1 |
rmt-server SUSE:Linux Enterprise Server for SAP Applications 15 | All versions | 2.5.7-3.31.1 |
rmt-server openSUSE:Leap 15.1 | All versions | 2.5.2-lp151.2.9.1 |
Products include Opensuse Rmt-Server.
How do I fix CVE-2019-18904?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-18904 being exploited?
There is no known exploitation of CVE-2019-18904 in the wild and no public exploit code.
Other vulnerabilities in SUSE Linux Enterprise High Performance Computing 15-ESPOS
Sources
Also known as GHSA-fpvp-5qrg-qr4v, SUSE-SU-2020:0260-1, SUSE-SU-2020:0278-1, SUSE-SU-2020:1179-1, openSUSE-SU-2020:0235-1.