Insecure Temporary File in s390-tools - CVE-2021-25316

Vulnerability identifier: #VU51450

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-25316

CWE-ID: CWE-377

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to s390-tools creates temporary files with predictable file names during VM migration. A local user can create temporary files before the VM migration starts and perform a DoS attack.

s390-tools
SUSE Linux Enterprise Server
SUSE Linux Enterprise Module for Basesystem
osasnmpd-debuginfo
s390-tools
s390-tools-debuginfo
s390-tools-debugsource
s390-tools-hmcdrvfs
s390-tools-hmcdrvfs-debuginfo
s390-tools-zdsfs
s390-tools-zdsfs-debuginfo
osasnmpd

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

osasnmpd-debuginfo - addressed in versions 2.1.0-18.29.1, 2.11.0-9.20.1
s390-tools - addressed in versions 2.1.0-18.29.1, 2.11.0-9.20.1
s390-tools-debuginfo - addressed in versions 2.1.0-18.29.1, 2.11.0-9.20.1
s390-tools-debugsource - addressed in versions 2.1.0-18.29.1, 2.11.0-9.20.1
s390-tools-hmcdrvfs - addressed in versions 2.1.0-18.29.1, 2.11.0-9.20.1
s390-tools-hmcdrvfs-debuginfo - addressed in versions 2.1.0-18.29.1, 2.11.0-9.20.1
s390-tools-zdsfs - addressed in versions 2.1.0-18.29.1, 2.11.0-9.20.1
s390-tools-zdsfs-debuginfo - addressed in versions 2.1.0-18.29.1, 2.11.0-9.20.1
osasnmpd - addressed in versions 2.1.0-18.29.1, 2.11.0-9.20.1

• https://bugzilla.suse.com/show_bug.cgi?id=1182777

• Denial of service in s390-tools
• SUSE update for s390-tools
• SUSE update for s390-tools