SUSE update for netty, netty-tcnative

Published: 2023-06-21

Risk	Medium
Patch available	YES
Number of vulnerabilities	3
CVE-ID	CVE-2022-24823 CVE-2022-41881 CVE-2022-41915
CWE-ID	CWE-378 CWE-835 CWE-113
Exploitation vector	Network
Public exploit	N/A
Vulnerable software	Development Tools Module Operating systems & Components / Operating system SUSE Package Hub 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 Operating systems & Components / Operating system SUSE Linux Enterprise Real Time 15 Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing 15 Operating systems & Components / Operating system SUSE Linux Enterprise Desktop 15 Operating systems & Components / Operating system openSUSE Leap Operating systems & Components / Operating system netty-javadoc Operating systems & Components / Operating system package or component netty-poms Operating systems & Components / Operating system package or component netty-tcnative-javadoc Operating systems & Components / Operating system package or component netty Operating systems & Components / Operating system package or component netty-tcnative Operating systems & Components / Operating system package or component Changes from 4.1.76: https://netty.io/news/2022/04/12/4-1 Operating systems & Components / Operating system package or component Changes from 4.1.77: https://netty.io/news/2022/05/06/2-1 Operating systems & Components / Operating system package or component Changes from 4.1.78: https://netty.io/news/2022/06/14/4-1 Operating systems & Components / Operating system package or component Changes from 4.1.79: https://netty.io/news/2022/07/11/4-1 Operating systems & Components / Operating system package or component Changes from 4.1.80: https://netty.io/news/2022/08/26/4-1 Operating systems & Components / Operating system package or component Changes from 4.1.81: https://netty.io/news/2022/09/08/4-1 Operating systems & Components / Operating system package or component Changes from 4.1.82: https://netty.io/news/2022/09/13/4-1 Operating systems & Components / Operating system package or component Changes from 4.1.84: https://netty.io/news/2022/10/11/4-1 Operating systems & Components / Operating system package or component Changes from 4.1.85: https://netty.io/news/2022/11/09/4-1 Operating systems & Components / Operating system package or component Changes from 4.1.86: https://netty.io/news/2022/12/12/4-1 Operating systems & Components / Operating system package or component Changes from 4.1.87: https://netty.io/news/2023/01/12/4-1 Operating systems & Components / Operating system package or component Changes from 4.1.88: https://netty.io/news/2023/02/12/4-1 Operating systems & Components / Operating system package or component Changes from 4.1.89: https://netty.io/news/2023/02/13/4-1 Operating systems & Components / Operating system package or component Changes from 4.1.90: https://netty.io/news/2023/03/14/4-1 Operating systems & Components / Operating system package or component
Vendor	SUSE

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Creation of Temporary File With Insecure Permissions

EUVDB-ID: #VU62849

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-24823

CWE-ID: CWE-378 - Creation of Temporary File With Insecure Permissions

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to usage of insecure permissions for temporary files. A local user can view contents of temporary files and gain access to sensitive information.

Mitigation

Update the affected package netty, netty-tcnative to the latest version.

Vulnerable software versions

Development Tools Module: 15-SP5

SUSE Package Hub 15: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

SUSE Linux Enterprise Desktop 15: SP5

openSUSE Leap: 15.5

netty-javadoc: before 4.1.90-150200.4.14.1

netty-poms: before 4.1.90-150200.4.14.1

netty-tcnative-javadoc: before 2.0.59-150200.3.10.1

netty: before 4.1.90-150200.4.14.1

netty-tcnative: before 2.0.59-150200.3.10.1

Changes from 4.1.76: https://netty.io/news/2022/04/12/4-1: before 76-Final.html

Changes from 4.1.77: https://netty.io/news/2022/05/06/2-1: before 77-Final.html

Changes from 4.1.78: https://netty.io/news/2022/06/14/4-1: before 78-Final.html

Changes from 4.1.79: https://netty.io/news/2022/07/11/4-1: before 79-Final.html

Changes from 4.1.80: https://netty.io/news/2022/08/26/4-1: before 80-Final.html

Changes from 4.1.81: https://netty.io/news/2022/09/08/4-1: before 81-Final.html

Changes from 4.1.82: https://netty.io/news/2022/09/13/4-1: before 82-Final.html

Changes from 4.1.84: https://netty.io/news/2022/10/11/4-1: before 84-Final.html

Changes from 4.1.85: https://netty.io/news/2022/11/09/4-1: before 85-Final.html

Changes from 4.1.86: https://netty.io/news/2022/12/12/4-1: before 86-Final.html

Changes from 4.1.87: https://netty.io/news/2023/01/12/4-1: before 87-Final.html

Changes from 4.1.88: https://netty.io/news/2023/02/12/4-1: before 88-Final.html

Changes from 4.1.89: https://netty.io/news/2023/02/13/4-1: before 89-Final.html

Changes from 4.1.90: https://netty.io/news/2023/03/14/4-1: before 90-Final.html

CPE2.3

External links

https://www.suse.com/support/update/announcement/2023/suse-su-20232096-2/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Infinite loop

EUVDB-ID: #VU70118

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-41881

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the HaProxyMessageDecoder when parsing a TLV with type of "PP2_TYPE_SSL". A remote attacker can pass a specially crafted message to consume all available system resources and cause denial of service conditions.