SUSE update for krb5
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2021-37750 CVE-2022-42898 |
| CWE-ID | CWE-476 CWE-190 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
SUSE Linux Enterprise Server for SAP Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing Operating systems & Components / Operating system SUSE Linux Enterprise Server Operating systems & Components / Operating system krb5-32bit-debuginfo Operating systems & Components / Operating system package or component krb5-32bit Operating systems & Components / Operating system package or component krb5-server-debuginfo Operating systems & Components / Operating system package or component krb5-server Operating systems & Components / Operating system package or component krb5-plugin-preauth-pkinit-debuginfo Operating systems & Components / Operating system package or component krb5-plugin-preauth-pkinit Operating systems & Components / Operating system package or component krb5-plugin-preauth-otp-debuginfo Operating systems & Components / Operating system package or component krb5-plugin-preauth-otp Operating systems & Components / Operating system package or component krb5-plugin-kdb-ldap-debuginfo Operating systems & Components / Operating system package or component krb5-plugin-kdb-ldap Operating systems & Components / Operating system package or component krb5-devel Operating systems & Components / Operating system package or component krb5-debugsource Operating systems & Components / Operating system package or component krb5-debuginfo Operating systems & Components / Operating system package or component krb5-client-debuginfo Operating systems & Components / Operating system package or component krb5-client Operating systems & Components / Operating system package or component krb5 Operating systems & Components / Operating system package or component |
| Vendor | SUSE |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) NULL pointer dereference
EUVDB-ID: #VU56828
Risk: Medium
CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2021-37750
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the Key Distribution Center (KDC) in kdc/do_tgs_req.c. A remote user can pass specially crafted data via the FAST inner body that lacks a server field, trigger a NULL pointer dereference error and perform a denial of service (DoS) attack.
Update the affected package krb5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-LTSS - 15-ESPOS
SUSE Linux Enterprise Server: 15-LTSS
krb5-32bit-debuginfo: before 1.15.2-150000.6.17.1
krb5-32bit: before 1.15.2-150000.6.17.1
krb5-server-debuginfo: before 1.15.2-150000.6.17.1
krb5-server: before 1.15.2-150000.6.17.1
krb5-plugin-preauth-pkinit-debuginfo: before 1.15.2-150000.6.17.1
krb5-plugin-preauth-pkinit: before 1.15.2-150000.6.17.1
krb5-plugin-preauth-otp-debuginfo: before 1.15.2-150000.6.17.1
krb5-plugin-preauth-otp: before 1.15.2-150000.6.17.1
krb5-plugin-kdb-ldap-debuginfo: before 1.15.2-150000.6.17.1
krb5-plugin-kdb-ldap: before 1.15.2-150000.6.17.1
krb5-devel: before 1.15.2-150000.6.17.1
krb5-debugsource: before 1.15.2-150000.6.17.1
krb5-debuginfo: before 1.15.2-150000.6.17.1
krb5-client-debuginfo: before 1.15.2-150000.6.17.1
krb5-client: before 1.15.2-150000.6.17.1
krb5: before 1.15.2-150000.6.17.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-LTSS:*:*:*:*:*:*:*
- cpe:2.3:a:suse:krb5-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-server-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-server:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-plugin-preauth-pkinit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-plugin-preauth-pkinit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-plugin-preauth-otp-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-plugin-preauth-otp:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-plugin-kdb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-plugin-kdb-ldap:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-client-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-client:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2022/suse-su-20224154-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Integer overflow
EUVDB-ID: #VU69337
Risk: Medium
CVSSv4.0: 5.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2022-42898
CWE-ID:
CWE-190 - Integer overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote user to execute arbitrary code on the target system.
The vulnerability exists due to an integer overflow within the S4U2Proxy handler on 32-bit systems. A remote user can send specially crafted request to the KDC server, trigger an integer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationUpdate the affected package krb5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-LTSS - 15-ESPOS
SUSE Linux Enterprise Server: 15-LTSS
krb5-32bit-debuginfo: before 1.15.2-150000.6.17.1
krb5-32bit: before 1.15.2-150000.6.17.1
krb5-server-debuginfo: before 1.15.2-150000.6.17.1
krb5-server: before 1.15.2-150000.6.17.1
krb5-plugin-preauth-pkinit-debuginfo: before 1.15.2-150000.6.17.1
krb5-plugin-preauth-pkinit: before 1.15.2-150000.6.17.1
krb5-plugin-preauth-otp-debuginfo: before 1.15.2-150000.6.17.1
krb5-plugin-preauth-otp: before 1.15.2-150000.6.17.1
krb5-plugin-kdb-ldap-debuginfo: before 1.15.2-150000.6.17.1
krb5-plugin-kdb-ldap: before 1.15.2-150000.6.17.1
krb5-devel: before 1.15.2-150000.6.17.1
krb5-debugsource: before 1.15.2-150000.6.17.1
krb5-debuginfo: before 1.15.2-150000.6.17.1
krb5-client-debuginfo: before 1.15.2-150000.6.17.1
krb5-client: before 1.15.2-150000.6.17.1
krb5: before 1.15.2-150000.6.17.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-ESPOS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-LTSS:*:*:*:*:*:*:*
- cpe:2.3:a:suse:krb5-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-server-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-server:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-plugin-preauth-pkinit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-plugin-preauth-pkinit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-plugin-preauth-otp-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-plugin-preauth-otp:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-plugin-kdb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-plugin-kdb-ldap:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-client-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5-client:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:krb5:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2022/suse-su-20224154-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
