SUSE update for openssh
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2021-41617 |
| CWE-ID | CWE-269 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
SUSE OpenStack Cloud Crowbar Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Operating systems & Components / Operating system HPE Helion Openstack Operating systems & Components / Operating system SUSE Linux Enterprise Server Operating systems & Components / Operating system SUSE OpenStack Cloud Operating systems & Components / Operating system openssh-helpers-debuginfo Operating systems & Components / Operating system package or component openssh-helpers Operating systems & Components / Operating system package or component openssh-fips Operating systems & Components / Operating system package or component openssh-debugsource Operating systems & Components / Operating system package or component openssh-debuginfo Operating systems & Components / Operating system package or component openssh-askpass-gnome-debuginfo Operating systems & Components / Operating system package or component openssh-askpass-gnome Operating systems & Components / Operating system package or component openssh Operating systems & Components / Operating system package or component |
| Vendor | SUSE |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Improper Privilege Management
EUVDB-ID: #VU58333
Risk: Low
CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-41617
CWE-ID:
CWE-269 - Improper Privilege Management
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges.
The vulnerability exists due to improper privilege management in sshd, when certain non-default configurations are used, because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and
AuthorizedPrincipalsCommand may run with privileges associated with
group memberships of the sshd process, if the configuration specifies
running the command as a different user. A local user can escalate privileges on the system.
Update the affected package openssh to the latest version.
Vulnerable software versionsSUSE OpenStack Cloud Crowbar: 8
SUSE Linux Enterprise Server for SAP: 12-SP3
HPE Helion Openstack: 8
SUSE Linux Enterprise Server: 12-SP2-BCL - 12-SP3-BCL
SUSE OpenStack Cloud: 8
openssh-helpers-debuginfo: before 7.2p2-74.60.1
openssh-helpers: before 7.2p2-74.60.1
openssh-fips: before 7.2p2-74.60.1
openssh-debugsource: before 7.2p2-74.60.1
openssh-debuginfo: before 7.2p2-74.60.1
openssh-askpass-gnome-debuginfo: before 7.2p2-74.60.1
openssh-askpass-gnome: before 7.2p2-74.60.1
openssh: before 7.2p2-74.60.1
CPE2.3- cpe:2.3:o:suse:suse_openstack_cloud_crowbar:8:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:12-SP3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:hpe_helion_openstack:8:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP2-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP3-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP3-BCL:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_openstack_cloud:8:*:*:*:*:*:*:*
- cpe:2.3:o:suse:openssh-helpers-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:openssh-helpers:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:openssh-fips:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:openssh-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:openssh-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:openssh-askpass-gnome-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:openssh-askpass-gnome:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:openssh:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2021/suse-su-20213951-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
