Riskcovery

CVE-2019-18904

Migrations requests can cause DoS on rmt

State
Published
Severity
6.5 Medium
Published
Apr 3, 2020
Updated
Sep 16, 2024
Reserved
Nov 12, 2019

Read the record on cve.org

Description

A Uncontrolled Resource Consumption vulnerability in rmt of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Public Cloud 15-SP1, SUSE Linux Enterprise Module for Server Applications 15, SUSE Linux Enterprise Module for Server Applications 15-SP1, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1 allows remote attackers to cause DoS against rmt by requesting migrations. This issue affects: SUSE Linux Enterprise High Performance Computing 15-ESPOS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise High Performance Computing 15-LTSS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Module for Public Cloud 15-SP1 rmt-server versions prior to 2.5.2-3.9.1. SUSE Linux Enterprise Module for Server Applications 15 rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Module for Server Applications 15-SP1 rmt-server versions prior to 2.5.2-3.9.1. SUSE Linux Enterprise Server 15-LTSS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.5.2-3.26.1. openSUSE Leap 15.1 rmt-server versions prior to 2.5.2-lp151.2.9.1.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsuse

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE
  • rmt-server to before 2.5.2-3.26.1Affected
SUSE Linux Enterprise High Performance Computing 15-LTSSSUSE
  • rmt-server to before 2.5.2-3.26.1Affected
SUSE Linux Enterprise Module for Public Cloud 15-SP1SUSE
  • rmt-server to before 2.5.2-3.9.1Affected
SUSE Linux Enterprise Module for Server Applications 15SUSE
  • rmt-server to before 2.5.2-3.26.1Affected
SUSE Linux Enterprise Module for Server Applications 15-SP1SUSE
  • rmt-server to before 2.5.2-3.9.1Affected
SUSE Linux Enterprise Server 15-LTSSSUSE
  • rmt-server to before 2.5.2-3.26.1Affected
SUSE Linux Enterprise Server for SAP 15SUSE
  • rmt-server to before 2.5.2-3.26.1Affected
openSUSE Leap 15.1openSUSE
  • rmt-server to before 2.5.2-lp151.2.9.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.