Description
A Uncontrolled Resource Consumption vulnerability in rmt of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Public Cloud 15-SP1, SUSE Linux Enterprise Module for Server Applications 15, SUSE Linux Enterprise Module for Server Applications 15-SP1, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1 allows remote attackers to cause DoS against rmt by requesting migrations. This issue affects: SUSE Linux Enterprise High Performance Computing 15-ESPOS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise High Performance Computing 15-LTSS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Module for Public Cloud 15-SP1 rmt-server versions prior to 2.5.2-3.9.1. SUSE Linux Enterprise Module for Server Applications 15 rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Module for Server Applications 15-SP1 rmt-server versions prior to 2.5.2-3.9.1. SUSE Linux Enterprise Server 15-LTSS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.5.2-3.26.1. openSUSE Leap 15.1 rmt-server versions prior to 2.5.2-lp151.2.9.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | SUSE Linux Enterprise High Performance Computing 15-ESPOS | rmt-server – < 2.5.2-3.26.1 | 2.5.2-3.26.1 |
| SUSE | SUSE Linux Enterprise High Performance Computing 15-LTSS | rmt-server – < 2.5.2-3.26.1 | 2.5.2-3.26.1 |
| SUSE | SUSE Linux Enterprise Module for Public Cloud 15-SP1 | rmt-server – < 2.5.2-3.9.1 | 2.5.2-3.9.1 |
| SUSE | SUSE Linux Enterprise Module for Server Applications 15 | rmt-server – < 2.5.2-3.26.1 | 2.5.2-3.26.1 |
| SUSE | SUSE Linux Enterprise Module for Server Applications 15-SP1 | rmt-server – < 2.5.2-3.9.1 | 2.5.2-3.9.1 |
| SUSE | SUSE Linux Enterprise Server 15-LTSS | rmt-server – < 2.5.2-3.26.1 | 2.5.2-3.26.1 |
| SUSE | SUSE Linux Enterprise Server for SAP 15 | rmt-server – < 2.5.2-3.26.1 | 2.5.2-3.26.1 |
| openSUSE | openSUSE Leap 15.1 | rmt-server – < 2.5.2-lp151.2.9.1 | 2.5.2-lp151.2.9.1 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | rmt-server | 2.5.2-3.9.1 | SUSE-SU-2020:0278-1 |
| SLES 15 | rmt-server | 2.5.2-3.26.1 | SUSE-SU-2020:1179-1, SUSE-SU-2020:0260-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 | rmt-server | 2.5.2-3.26.1 | SUSE-SU-2020:1179-1, SUSE-SU-2020:0260-1 |
| SLE HPC 15 | rmt-server | 2.5.2-3.26.1 | SUSE-SU-2020:1179-1, SUSE-SU-2020:0260-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | rmt-server | 2.6.13-1.1 | openSUSE-SU-2024:10589-1 |
| openSUSE Leap 15.1 | rmt-server | 2.5.2-lp151.2.9.1 | openSUSE-SU-2020:0235-1 |
Advisories 5
- openSUSE-SU-2020:0235-1 Security update for rmt-server SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:0260-1 Security update for rmt-server SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:1179-1 Security update for rmt-server SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:0278-1 Security update for rmt-server SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10589-1 rmt-server-2.6.13-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026