Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-21952

SUMA unauthenticated remote DoS via resource exhaustion

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE SUSE Manager Server 4.1

Default version status: unaffected

  • spacewalk-java to < 4.1.46affected

SUSE SUSE Manager Server 4.2

Default version status: unaffected

  • spacewalk-java to < 4.2.37affected

References