Description
SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | sblim-sfcb | No fix yet | — |
| Ubuntu 25.10 | sblim-sfcb | No fix yet | — |
| Ubuntu 24.04 LTS | sblim-sfcb | No fix yet | — |
| Ubuntu 22.04 LTS | sblim-sfcb | No fix yet | — |
| Ubuntu 20.04 LTS | sblim-sfcb | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | sblim-sfcb | No fix yet | — |
| Ubuntu 16.04 LTS | sblim-sfcb | No fix yet | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | sblim-sfcb | 1.4.9-13.6 | openSUSE-SU-2024:11368-1 |
Advisories 1
- openSUSE-SU-2024:11368-1 sblim-sfcb-1.4.9-13.6 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- [oss-security] 20180207 Fwe: [scr459004] sfcb - 1.4.9 mailing-list
- 103041 vdb-entry