CVE-2022-21952 SUMA unauthenticated remote DoS via resource exhaustion
Remote attackers can exhaust disk resources causing denial of service due to missing authentication in SUSE Manager Server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-21952?
CVE-2022-21952 is a high-severity denial of service vulnerability in SUSE Manager Server 4.1, published on 22 Jun 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.
Which versions are affected by CVE-2022-21952?
It affects 1 product.
Products include Suse Manager Server.
How do I fix CVE-2022-21952?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-21952 being exploited?
There is no known exploitation of CVE-2022-21952 in the wild and no public exploit code.
Other vulnerabilities in SUSE Manager Server 4.1
- CVE-2023-22644 JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
- CVE-2022-31248 SUMA user enumeration via weak error message
- CVE-2022-31255 SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction
- CVE-2022-43753 SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload
- CVE-2022-43754 SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do
Sources
Also known as GHSA-99mv-pfx6-v678.