Security Bulletin
This security bulletin contains one medium risk vulnerability.
EUVDB-ID: #VU55590
Risk: Medium
CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-20206
CWE-ID:
CWE-424 - Improper Protection of Alternate Path
Exploit availability: No
DescriptionThe vulnerability allows a remote user to compromise the affected system.
the vulnerability exists due to improper input validation. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the system. This flaw allows a remote user to execute other existing binaries other than the cni plugins/types, such as 'reboot'.
MitigationUpdate the affected package cni-plugins to the latest version.
Vulnerable software versionsopenSUSE Leap Micro: 5.2 - 5.3
SUSE Linux Enterprise Micro: 5.1 - 5.3
SUSE Linux Enterprise Module for Containers: 15-SP3 - 15-SP4
SUSE Enterprise Storage: 6 - 7.1
SUSE Manager Retail Branch Server: 4.0 - 4.3
SUSE Linux Enterprise Module for Public Cloud: 15-SP1 - 15-SP2
SUSE Manager Proxy: 4.0 - 4.3
SUSE Manager Server: 4.0 - 4.3
SUSE Linux Enterprise Server for SAP Applications: 15-SP1 - 15-SP4
SUSE Linux Enterprise Server: 15-SP1 - 15-SP4
SUSE Linux Enterprise High Performance Computing: 15-SP1 - 15-SP4
SUSE Linux Enterprise Server for SAP: 15-SP1 - 15-SP2
SUSE CaaS Platform: 4.0
openSUSE Leap: 15.3 - 15.4
cni-plugins: before 0.8.6-150100.3.11.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20224593-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.