Allocation of Resources Without Limits or Throttling in Uyuni SUSE Manager - CVE-2022-21952

Vulnerability identifier: #VU64571

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-21952

CWE-ID: CWE-770

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to the "/rhn/manager/frontend-log" script takes a text as a POST parameter and then it writes into the "/var/log/rhn/rhn_web_frontend.log" file. A remote non-authenticated attacker can send arbitrary amount of data to the application log and consume all available disk space, cause a denial of service condition.

Uyuni SUSE Manager
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Module for SUSE Manager Server
inter-server-sync
inter-server-sync-debuginfo
prometheus-formula
golang-github-QubitProducts-exporter_exporter
golang-github-lusitaniae-apache_exporter-debuginfo
golang-github-lusitaniae-apache_exporter
prometheus-exporters-formula
salt-netapi-client
subscription-matcher
virtual-host-gatherer
virtual-host-gatherer-Kubernetes
virtual-host-gatherer-Nutanix
virtual-host-gatherer-libcloud
virtual-host-gatherer-VMware
supportutils-plugin-salt
golang-github-prometheus-node_exporter
smdba
spacewalk-setup
release-notes-susemanager-proxy
release-notes-susemanager
spacecmd
spacewalk-utils-extras
spacewalk-utils
susemanager-schema
spacewalk-backend
spacewalk-backend-xmlrpc
spacewalk-backend-xml-export-libs
spacewalk-backend-tools
spacewalk-backend-sql-postgresql
spacewalk-backend-sql
spacewalk-backend-server
spacewalk-backend-package-push-server
spacewalk-backend-iss-export
spacewalk-backend-iss
spacewalk-backend-config-files-tool
spacewalk-backend-config-files-common
spacewalk-backend-config-files
spacewalk-backend-applet
spacewalk-backend-app
spacewalk-base-minimal
spacewalk-base
spacewalk-base-minimal-config
spacewalk-html
susemanager-web-libs
susemanager-tools
susemanager
susemanager-sls
uyuni-config-modules
spacewalk-java-config
spacewalk-java
spacewalk-java-lib
spacewalk-java-postgresql
spacewalk-taskomatic
patterns-suma_retail
patterns-suma_server
susemanager-docs_en-pdf
susemanager-docs_en
susemanager-doc-indexes
susemanager-sync-data
python3-spacewalk-certs-tools
spacewalk-certs-tools
postgresql-jdbc
py27-compat-salt

Install updates from vendor's website.

Uyuni SUSE Manager - update to 4.1.36-1
inter-server-sync - update to 0.2.2-150300.8.17.1
inter-server-sync-debuginfo - update to 0.2.2-150300.8.17.1
prometheus-formula - addressed in versions 0.3.7-150200.3.21.2, 0.6.2-150300.3.14.1
golang-github-QubitProducts-exporter_exporter - update to 0.4.0-150200.6.12.2
golang-github-lusitaniae-apache_exporter-debuginfo - update to 0.7.0-150200.2.6.2
golang-github-lusitaniae-apache_exporter - update to 0.7.0-150200.2.6.2
prometheus-exporters-formula - update to 0.9.5-150200.3.31.2
salt-netapi-client - update to 0.19.0-150300.3.6.1
subscription-matcher - update to 0.28-150200.3.15.2
virtual-host-gatherer - update to 1.0.23-150300.3.3.1
virtual-host-gatherer-Kubernetes - update to 1.0.23-150300.3.3.1
virtual-host-gatherer-Nutanix - update to 1.0.23-150300.3.3.1
virtual-host-gatherer-libcloud - update to 1.0.23-150300.3.3.1
virtual-host-gatherer-VMware - update to 1.0.23-150300.3.3.1
supportutils-plugin-salt - update to 1.2.0-150300.3.3.1
golang-github-prometheus-node_exporter - update to 1.3.0-150200.3.9.3
smdba - update to 1.7.10-0.150300.3.6.1
spacewalk-setup - update to 4.1.11-150200.3.18.2
release-notes-susemanager-proxy - addressed in versions 4.1.15-150200.3.56.1, 4.2.7-150300.3.31.2
release-notes-susemanager - addressed in versions 4.1.15-150200.3.80.1, 4.2.7-150300.3.44.1
spacecmd - addressed in versions 4.1.18-150200.4.39.3, 4.2.17-150300.4.21.4
spacewalk-utils-extras - addressed in versions 4.1.20-150200.3.30.2, 4.2.16-150300.3.15.5
spacewalk-utils - addressed in versions 4.1.20-150200.3.30.2, 4.2.16-150300.3.15.5
susemanager-schema - addressed in versions 4.1.26-150200.3.45.4, 4.2.22-150300.3.21.6
spacewalk-backend - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-xmlrpc - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-xml-export-libs - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-tools - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-sql-postgresql - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-sql - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-server - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-package-push-server - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-iss-export - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-iss - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-config-files-tool - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-config-files-common - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-config-files - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-applet - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-backend-app - addressed in versions 4.1.31-150200.4.50.4, 4.2.22-150300.4.23.1
spacewalk-base-minimal - addressed in versions 4.1.34-150200.3.47.6, 4.2.27-150300.3.21.7
spacewalk-base - addressed in versions 4.1.34-150200.3.47.6, 4.2.27-150300.3.21.7
spacewalk-base-minimal-config - addressed in versions 4.1.34-150200.3.47.6, 4.2.27-150300.3.21.7
spacewalk-html - addressed in versions 4.1.34-150200.3.47.6, 4.2.27-150300.3.21.7
susemanager-web-libs - update to 4.1.34-150200.3.47.6
susemanager-tools - addressed in versions 4.1.36-150200.3.52.1, 4.2.32-150300.3.31.1
susemanager - addressed in versions 4.1.36-150200.3.52.1, 4.2.32-150300.3.31.1
susemanager-sls - addressed in versions 4.1.36-150200.3.64.2, 4.2.23-150300.3.25.4
uyuni-config-modules - addressed in versions 4.1.36-150200.3.64.2, 4.2.23-150300.3.25.4
spacewalk-java-config - addressed in versions 4.1.46-150200.3.71.5, 4.2.38-150300.3.35.1
spacewalk-java - addressed in versions 4.1.46-150200.3.71.5, 4.2.38-150300.3.35.1
spacewalk-java-lib - addressed in versions 4.1.46-150200.3.71.5, 4.2.38-150300.3.35.1
spacewalk-java-postgresql - addressed in versions 4.1.46-150200.3.71.5, 4.2.38-150300.3.35.1
spacewalk-taskomatic - addressed in versions 4.1.46-150200.3.71.5, 4.2.38-150300.3.35.1
patterns-suma_retail - update to 4.1-150200.6.12.2
patterns-suma_server - update to 4.1-150200.6.12.2
susemanager-docs_en-pdf - addressed in versions 4.1-150200.11.55.2, 4.2-150300.12.27.1
susemanager-docs_en - addressed in versions 4.1-150200.11.55.2, 4.2-150300.12.27.1
susemanager-doc-indexes - addressed in versions 4.1-150200.11.55.4, 4.2-150300.12.27.6
susemanager-sync-data - update to 4.2.12-150300.3.18.3
python3-spacewalk-certs-tools - update to 4.2.16-150300.3.18.3
spacewalk-certs-tools - update to 4.2.16-150300.3.18.3
postgresql-jdbc - update to 42.2.10-150200.3.8.2
py27-compat-salt - update to 3000.3-150200.6.24.2

• https://bugzilla.suse.com/show_bug.cgi?id=1199512

• Multiple vulnerabilities in Uyuni SUSE Manager
• SUSE update for Recommended update for SUSE Manager 4.1.15 Release Notes
• SUSE update for SUSE Manager Server 4.2
• SUSE update for SUSE Manager Server 4.1
• SUSE update for release-notes-susemanager, release-notes-susemanager-proxy