Security Bulletin
This security bulletin contains information about 8 vulnerabilities.
EUVDB-ID: #VU65355
Risk: Medium
CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-7753
CWE-ID:
CWE-185 - Incorrect Regular Expression
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient input validation when processing regular expressions. A remote attacker can pass specially crafted data to the application and perform regular expression denial of service (ReDos) attack.
Update the affected package SUSE Manager Client Tools to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP6
SUSE Linux Enterprise Server 15: SP1 - SP6
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP6
SUSE Linux Enterprise Desktop 15: SP1 - SP6
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Manager Proxy Module: 4.3
SUSE Manager Client Tools for SLE Micro: 5
SUSE Manager Client Tools for SLE: 15
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Manager Server Module: 4.3
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Manager Retail Branch Server: 4.3
SUSE Manager Server: 4.3
SUSE Manager Proxy: 4.3
SUSE Linux Enterprise Server for SAP Applications: 15
python3-spacewalk-client-tools: before 4.3.18-150000.3.86.2
python3-spacewalk-client-setup: before 4.3.18-150000.3.86.2
uyuni-proxy-systemd-services: before 4.3.10-150000.1.15.1
spacewalk-client-tools: before 4.3.18-150000.3.86.2
spacewalk-check: before 4.3.18-150000.3.86.2
python3-spacewalk-check: before 4.3.18-150000.3.86.2
mgr-daemon: before 4.3.8-150000.1.44.1
spacewalk-client-setup: before 4.3.18-150000.3.86.2
grafana: before 9.5.8-150000.1.60.2
grafana-debuginfo: before 9.5.8-150000.1.60.2
golang-github-prometheus-prometheus: before 2.45.0-150000.3.53.1
firewalld-prometheus-config: before 0.1-150000.3.53.1
spacecmd: before 4.3.26-150000.3.113.1
prometheus-postgres_exporter: before 0.10.1-150000.1.17.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-150000.1.20.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-150000.1.20.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240487-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU57967
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-3807
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input when matching crafted invalid ANSI escape codes in ansi-regex. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationUpdate the affected package SUSE Manager Client Tools to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP6
SUSE Linux Enterprise Server 15: SP1 - SP6
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP6
SUSE Linux Enterprise Desktop 15: SP1 - SP6
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Manager Proxy Module: 4.3
SUSE Manager Client Tools for SLE Micro: 5
SUSE Manager Client Tools for SLE: 15
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Manager Server Module: 4.3
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Manager Retail Branch Server: 4.3
SUSE Manager Server: 4.3
SUSE Manager Proxy: 4.3
SUSE Linux Enterprise Server for SAP Applications: 15
python3-spacewalk-client-tools: before 4.3.18-150000.3.86.2
python3-spacewalk-client-setup: before 4.3.18-150000.3.86.2
uyuni-proxy-systemd-services: before 4.3.10-150000.1.15.1
spacewalk-client-tools: before 4.3.18-150000.3.86.2
spacewalk-check: before 4.3.18-150000.3.86.2
python3-spacewalk-check: before 4.3.18-150000.3.86.2
mgr-daemon: before 4.3.8-150000.1.44.1
spacewalk-client-setup: before 4.3.18-150000.3.86.2
grafana: before 9.5.8-150000.1.60.2
grafana-debuginfo: before 9.5.8-150000.1.60.2
golang-github-prometheus-prometheus: before 2.45.0-150000.3.53.1
firewalld-prometheus-config: before 0.1-150000.3.53.1
spacecmd: before 4.3.26-150000.3.113.1
prometheus-postgres_exporter: before 0.10.1-150000.1.17.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-150000.1.20.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-150000.1.20.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240487-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU64034
Risk: High
CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-3918
CWE-ID:
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Exploit availability: No
DescriptionThe disclosed vulnerability allows a remote attacker to execute arbitrary code on the system.
The vulnerability exists due to insufficient sanitization of user-supplied data during the validation of a JSON object. A remote attacker can pass a specially crafted JSON file for validation and execute arbitrary code.
MitigationUpdate the affected package SUSE Manager Client Tools to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP6
SUSE Linux Enterprise Server 15: SP1 - SP6
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP6
SUSE Linux Enterprise Desktop 15: SP1 - SP6
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Manager Proxy Module: 4.3
SUSE Manager Client Tools for SLE Micro: 5
SUSE Manager Client Tools for SLE: 15
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Manager Server Module: 4.3
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Manager Retail Branch Server: 4.3
SUSE Manager Server: 4.3
SUSE Manager Proxy: 4.3
SUSE Linux Enterprise Server for SAP Applications: 15
python3-spacewalk-client-tools: before 4.3.18-150000.3.86.2
python3-spacewalk-client-setup: before 4.3.18-150000.3.86.2
uyuni-proxy-systemd-services: before 4.3.10-150000.1.15.1
spacewalk-client-tools: before 4.3.18-150000.3.86.2
spacewalk-check: before 4.3.18-150000.3.86.2
python3-spacewalk-check: before 4.3.18-150000.3.86.2
mgr-daemon: before 4.3.8-150000.1.44.1
spacewalk-client-setup: before 4.3.18-150000.3.86.2
grafana: before 9.5.8-150000.1.60.2
grafana-debuginfo: before 9.5.8-150000.1.60.2
golang-github-prometheus-prometheus: before 2.45.0-150000.3.53.1
firewalld-prometheus-config: before 0.1-150000.3.53.1
spacecmd: before 4.3.26-150000.3.113.1
prometheus-postgres_exporter: before 0.10.1-150000.1.17.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-150000.1.20.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-150000.1.20.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240487-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU62361
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-43138
CWE-ID:
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to escalate privileges within the application.
The vulnerability exists due to improper input validation when handling data passed via the mapValues()
method. A remote attacker can send a specially crafted request and escalate privileges within the application.
Update the affected package SUSE Manager Client Tools to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP6
SUSE Linux Enterprise Server 15: SP1 - SP6
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP6
SUSE Linux Enterprise Desktop 15: SP1 - SP6
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Manager Proxy Module: 4.3
SUSE Manager Client Tools for SLE Micro: 5
SUSE Manager Client Tools for SLE: 15
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Manager Server Module: 4.3
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Manager Retail Branch Server: 4.3
SUSE Manager Server: 4.3
SUSE Manager Proxy: 4.3
SUSE Linux Enterprise Server for SAP Applications: 15
python3-spacewalk-client-tools: before 4.3.18-150000.3.86.2
python3-spacewalk-client-setup: before 4.3.18-150000.3.86.2
uyuni-proxy-systemd-services: before 4.3.10-150000.1.15.1
spacewalk-client-tools: before 4.3.18-150000.3.86.2
spacewalk-check: before 4.3.18-150000.3.86.2
python3-spacewalk-check: before 4.3.18-150000.3.86.2
mgr-daemon: before 4.3.8-150000.1.44.1
spacewalk-client-setup: before 4.3.18-150000.3.86.2
grafana: before 9.5.8-150000.1.60.2
grafana-debuginfo: before 9.5.8-150000.1.60.2
golang-github-prometheus-prometheus: before 2.45.0-150000.3.53.1
firewalld-prometheus-config: before 0.1-150000.3.53.1
spacecmd: before 4.3.26-150000.3.113.1
prometheus-postgres_exporter: before 0.10.1-150000.1.17.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-150000.1.20.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-150000.1.20.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240487-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU58647
Risk: High
CVSSv3.1: 7.2 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C]
CVE-ID: CVE-2021-43798
CWE-ID:
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing directory traversal sequences, passed after the "/public/plugins/" URL. A remote non-authenticated attacker can send a specially crafted HTTP request and read arbitrary files on the system.
MitigationUpdate the affected package SUSE Manager Client Tools to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP6
SUSE Linux Enterprise Server 15: SP1 - SP6
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP6
SUSE Linux Enterprise Desktop 15: SP1 - SP6
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Manager Proxy Module: 4.3
SUSE Manager Client Tools for SLE Micro: 5
SUSE Manager Client Tools for SLE: 15
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Manager Server Module: 4.3
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Manager Retail Branch Server: 4.3
SUSE Manager Server: 4.3
SUSE Manager Proxy: 4.3
SUSE Linux Enterprise Server for SAP Applications: 15
python3-spacewalk-client-tools: before 4.3.18-150000.3.86.2
python3-spacewalk-client-setup: before 4.3.18-150000.3.86.2
uyuni-proxy-systemd-services: before 4.3.10-150000.1.15.1
spacewalk-client-tools: before 4.3.18-150000.3.86.2
spacewalk-check: before 4.3.18-150000.3.86.2
python3-spacewalk-check: before 4.3.18-150000.3.86.2
mgr-daemon: before 4.3.8-150000.1.44.1
spacewalk-client-setup: before 4.3.18-150000.3.86.2
grafana: before 9.5.8-150000.1.60.2
grafana-debuginfo: before 9.5.8-150000.1.60.2
golang-github-prometheus-prometheus: before 2.45.0-150000.3.53.1
firewalld-prometheus-config: before 0.1-150000.3.53.1
spacecmd: before 4.3.26-150000.3.113.1
prometheus-postgres_exporter: before 0.10.1-150000.1.17.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-150000.1.20.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-150000.1.20.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240487-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
Yes. This vulnerability is being exploited in the wild.
EUVDB-ID: #VU64404
Risk: Low
CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-43815
CWE-ID:
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing .csv files. A remote user can send a specially crafted HTTP request and read arbitrary files on the system.
MitigationUpdate the affected package SUSE Manager Client Tools to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP6
SUSE Linux Enterprise Server 15: SP1 - SP6
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP6
SUSE Linux Enterprise Desktop 15: SP1 - SP6
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Manager Proxy Module: 4.3
SUSE Manager Client Tools for SLE Micro: 5
SUSE Manager Client Tools for SLE: 15
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Manager Server Module: 4.3
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Manager Retail Branch Server: 4.3
SUSE Manager Server: 4.3
SUSE Manager Proxy: 4.3
SUSE Linux Enterprise Server for SAP Applications: 15
python3-spacewalk-client-tools: before 4.3.18-150000.3.86.2
python3-spacewalk-client-setup: before 4.3.18-150000.3.86.2
uyuni-proxy-systemd-services: before 4.3.10-150000.1.15.1
spacewalk-client-tools: before 4.3.18-150000.3.86.2
spacewalk-check: before 4.3.18-150000.3.86.2
python3-spacewalk-check: before 4.3.18-150000.3.86.2
mgr-daemon: before 4.3.8-150000.1.44.1
spacewalk-client-setup: before 4.3.18-150000.3.86.2
grafana: before 9.5.8-150000.1.60.2
grafana-debuginfo: before 9.5.8-150000.1.60.2
golang-github-prometheus-prometheus: before 2.45.0-150000.3.53.1
firewalld-prometheus-config: before 0.1-150000.3.53.1
spacecmd: before 4.3.26-150000.3.113.1
prometheus-postgres_exporter: before 0.10.1-150000.1.17.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-150000.1.20.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-150000.1.20.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240487-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU61669
Risk: Low
CVSSv3.1: 3.2 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-0155
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output by the application. A remote attacker can gain unauthorized access to sensitive information on the system.
MitigationUpdate the affected package SUSE Manager Client Tools to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP6
SUSE Linux Enterprise Server 15: SP1 - SP6
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP6
SUSE Linux Enterprise Desktop 15: SP1 - SP6
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Manager Proxy Module: 4.3
SUSE Manager Client Tools for SLE Micro: 5
SUSE Manager Client Tools for SLE: 15
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Manager Server Module: 4.3
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Manager Retail Branch Server: 4.3
SUSE Manager Server: 4.3
SUSE Manager Proxy: 4.3
SUSE Linux Enterprise Server for SAP Applications: 15
python3-spacewalk-client-tools: before 4.3.18-150000.3.86.2
python3-spacewalk-client-setup: before 4.3.18-150000.3.86.2
uyuni-proxy-systemd-services: before 4.3.10-150000.1.15.1
spacewalk-client-tools: before 4.3.18-150000.3.86.2
spacewalk-check: before 4.3.18-150000.3.86.2
python3-spacewalk-check: before 4.3.18-150000.3.86.2
mgr-daemon: before 4.3.8-150000.1.44.1
spacewalk-client-setup: before 4.3.18-150000.3.86.2
grafana: before 9.5.8-150000.1.60.2
grafana-debuginfo: before 9.5.8-150000.1.60.2
golang-github-prometheus-prometheus: before 2.45.0-150000.3.53.1
firewalld-prometheus-config: before 0.1-150000.3.53.1
spacecmd: before 4.3.26-150000.3.113.1
prometheus-postgres_exporter: before 0.10.1-150000.1.17.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-150000.1.20.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-150000.1.20.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240487-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU68390
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-41715
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources in regexp/syntax when handling regular expressions. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.
MitigationUpdate the affected package SUSE Manager Client Tools to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP6
SUSE Linux Enterprise Server 15: SP1 - SP6
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP6
SUSE Linux Enterprise Desktop 15: SP1 - SP6
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Manager Proxy Module: 4.3
SUSE Manager Client Tools for SLE Micro: 5
SUSE Manager Client Tools for SLE: 15
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Manager Server Module: 4.3
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Manager Retail Branch Server: 4.3
SUSE Manager Server: 4.3
SUSE Manager Proxy: 4.3
SUSE Linux Enterprise Server for SAP Applications: 15
python3-spacewalk-client-tools: before 4.3.18-150000.3.86.2
python3-spacewalk-client-setup: before 4.3.18-150000.3.86.2
uyuni-proxy-systemd-services: before 4.3.10-150000.1.15.1
spacewalk-client-tools: before 4.3.18-150000.3.86.2
spacewalk-check: before 4.3.18-150000.3.86.2
python3-spacewalk-check: before 4.3.18-150000.3.86.2
mgr-daemon: before 4.3.8-150000.1.44.1
spacewalk-client-setup: before 4.3.18-150000.3.86.2
grafana: before 9.5.8-150000.1.60.2
grafana-debuginfo: before 9.5.8-150000.1.60.2
golang-github-prometheus-prometheus: before 2.45.0-150000.3.53.1
firewalld-prometheus-config: before 0.1-150000.3.53.1
spacecmd: before 4.3.26-150000.3.113.1
prometheus-postgres_exporter: before 0.10.1-150000.1.17.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-150000.1.20.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-150000.1.20.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240487-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.