Skip to content
OpenAdvisories
High · 7.5 CVE-2022-21952 EUVD-2022-27108GHSA-99mv-pfx6-v678

SUMA unauthenticated remote DoS via resource exhaustion

Published Jun 22, 2022 · Updated Jul 7, 2026 · Assigned by suse

Vendor: SUSE Product: SUSE Manager Server 4.1 Product: SUSE Manager Server 4.2

Description

A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.

Affected products

VendorProductAffectedFixed
SUSE SUSE Manager Server 4.1 spacewalk-java – < 4.1.46 4.1.46
SUSE SUSE Manager Server 4.2 spacewalk-java – < 4.2.37 4.2.37

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SUSE Manager Server Module 4.2 inter-server-sync 0.2.2-150300.8.17.1 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 prometheus-formula 0.6.2-150300.3.14.1 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 salt-netapi-client 0.19.0-150300.3.6.1 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 smdba 1.7.10-0.150300.3.6.1 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 spacecmd 4.2.17-150300.4.21.4 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 spacewalk-backend 4.2.22-150300.4.23.1 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 spacewalk-certs-tools 4.2.16-150300.3.18.3 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 spacewalk-java 4.2.38-150300.3.35.1 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 spacewalk-utils 4.2.16-150300.3.15.5 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 spacewalk-web 4.2.27-150300.3.21.7 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 supportutils-plugin-salt 1.2.0-150300.3.3.1 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 susemanager 4.2.32-150300.3.31.1 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 susemanager-doc-indexes 4.2-150300.12.27.6 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 susemanager-docs_en 4.2-150300.12.27.1 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 susemanager-schema 4.2.22-150300.3.21.6 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 susemanager-sls 4.2.23-150300.3.25.4 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 susemanager-sync-data 4.2.12-150300.3.18.3 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.2 virtual-host-gatherer 1.0.23-150300.3.3.1 SUSE-SU-2022:2144-1
SUSE Manager Server Module 4.1 golang-github-QubitProducts-exporter_exporter 0.4.0-150200.6.12.2 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 golang-github-lusitaniae-apache_exporter 0.7.0-150200.2.6.2 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 golang-github-prometheus-node_exporter 1.3.0-150200.3.9.3 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 patterns-suse-manager 4.1-150200.6.12.2 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 postgresql-jdbc 42.2.10-150200.3.8.2 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 prometheus-exporters-formula 0.9.5-150200.3.31.2 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 prometheus-formula 0.3.7-150200.3.21.2 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 py27-compat-salt 3000.3-150200.6.24.2 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 spacecmd 4.1.18-150200.4.39.3 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 spacewalk-backend 4.1.31-150200.4.50.4 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 spacewalk-java 4.1.46-150200.3.71.5 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 spacewalk-setup 4.1.11-150200.3.18.2 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 spacewalk-utils 4.1.20-150200.3.30.2 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 spacewalk-web 4.1.34-150200.3.47.6 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 subscription-matcher 0.28-150200.3.15.2 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 susemanager 4.1.36-150200.3.52.1 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 susemanager-doc-indexes 4.1-150200.11.55.4 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 susemanager-docs_en 4.1-150200.11.55.2 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 susemanager-schema 4.1.26-150200.3.45.4 SUSE-SU-2022:2145-1
SUSE Manager Server Module 4.1 susemanager-sls 4.1.36-150200.3.64.2 SUSE-SU-2022:2145-1
SUSE Manager Server 4.2 release-notes-susemanager 4.2.7-150300.3.44.1 SUSE-SU-2022:2146-1
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE Manager Server 4.1 release-notes-susemanager 4.1.15-150200.3.80.1 SUSE-SU-2022:2143-1
SUSE Manager Retail Branch Server 4.2 release-notes-susemanager-proxy 4.2.7-150300.3.31.2 SUSE-SU-2022:2146-1
SUSE Manager Retail Branch Server 4.1 release-notes-susemanager-proxy 4.1.15-150200.3.56.1 SUSE-SU-2022:2143-1
SUSE Manager Proxy Module 4.2 spacecmd 4.2.17-150300.4.21.4 SUSE-SU-2022:2144-1
SUSE Manager Proxy Module 4.2 spacewalk-backend 4.2.22-150300.4.23.1 SUSE-SU-2022:2144-1
SUSE Manager Proxy Module 4.2 spacewalk-certs-tools 4.2.16-150300.3.18.3 SUSE-SU-2022:2144-1
SUSE Manager Proxy Module 4.2 spacewalk-web 4.2.27-150300.3.21.7 SUSE-SU-2022:2144-1
SUSE Manager Proxy Module 4.2 supportutils-plugin-salt 1.2.0-150300.3.3.1 SUSE-SU-2022:2144-1
SUSE Manager Proxy 4.2 release-notes-susemanager-proxy 4.2.7-150300.3.31.2 SUSE-SU-2022:2146-1
SUSE Manager Proxy 4.1 release-notes-susemanager-proxy 4.1.15-150200.3.56.1 SUSE-SU-2022:2143-1

Advisories 4

References