SUSE update for google-osconfig-agent



| Updated: 2024-01-28
Risk High
Patch available YES
Number of vulnerabilities 2
CVE-ID CVE-2021-38297
CVE-2022-23806
CWE-ID CWE-119
CWE-252
Exploitation vector Network
Public exploit Public exploit code for vulnerability #1 is available.
Vulnerable software
Subscribe 		Public Cloud Module
Operating systems & Components / Operating system

SUSE Linux Enterprise Server for SAP Applications 15
Operating systems & Components / Operating system

SUSE Linux Enterprise Server 15
Operating systems & Components / Operating system

SUSE Linux Enterprise High Performance Computing 15
Operating systems & Components / Operating system

SUSE Manager Retail Branch Server
Operating systems & Components / Operating system

SUSE Manager Proxy
Operating systems & Components / Operating system

SUSE Manager Server
Operating systems & Components / Operating system

openSUSE Leap
Operating systems & Components / Operating system

google-osconfig-agent
Operating systems & Components / Operating system package or component

Vendor SUSE

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Buffer overflow

EUVDB-ID: #VU57579

Risk: High

CVSSv3.1: 8.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]

CVE-ID: CVE-2021-38297

CWE-ID: CWE-119 - Memory corruption

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A remote attacker can trigger memory corruption via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used.

Mitigation

Update the affected package google-osconfig-agent to the latest version.

Vulnerable software versions

Public Cloud Module: 15-SP1 - 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP4

SUSE Linux Enterprise Server 15: SP1 - SP4

SUSE Linux Enterprise High Performance Computing 15: SP1 - SP4

SUSE Manager Retail Branch Server: 4.0 - 4.3

SUSE Manager Proxy: 4.0 - 4.3

SUSE Manager Server: 4.0 - 4.3

openSUSE Leap: 15.4

google-osconfig-agent: before 20230222.00-150000.1.27.1

CPE2.3 External links

http://www.suse.com/support/update/announcement/2023/suse-su-20230602-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

2) Unchecked Return Value

EUVDB-ID: #VU62036

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-23806

CWE-ID: CWE-252 - Unchecked Return Value

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to unchecked return value within the Curve.IsOnCurve() function in crypto/elliptic. A remote attacker can force the application to incorrectly return true in situations with a big.Int value that is not a valid field element. As a result, an attacker can modify application flow, which can lead to unauthorized data modification or denial of service.

Mitigation

Update the affected package google-osconfig-agent to the latest version.

Vulnerable software versions

Public Cloud Module: 15-SP1 - 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP4

SUSE Linux Enterprise Server 15: SP1 - SP4

SUSE Linux Enterprise High Performance Computing 15: SP1 - SP4

SUSE Manager Retail Branch Server: 4.0 - 4.3

SUSE Manager Proxy: 4.0 - 4.3

SUSE Manager Server: 4.0 - 4.3

openSUSE Leap: 15.4

google-osconfig-agent: before 20230222.00-150000.1.27.1

CPE2.3 External links

http://www.suse.com/support/update/announcement/2023/suse-su-20230602-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###