Alerts This Week
Warning Icon 1 1,146
Alerts This Week
Warning Icon 1 1,146

SUSE Linux 16.0 google-guest-agent CRITICAL DoS Auth Bypass Vulnerability

suse
Calendar Grey April 28, 2026
Dist Suse Esm H88
Two vulnerabilities fixed in important SUSE google-guest-agent update, enhancing system security and stability.
An update that solves two vulnerabilities and has four fixes can now be installed.

Summary

## This update for google-guest-agent fixes the following issues: Update to version 20250506.01 (bsc#1243254, bsc#1243505). Security issues fixed: * CVE-2024-45337: golang.org/x/crypto/ssh: misuse of the ServerConfig.PublicKeyCallback callback can lead to authorization bypass in applications (bsc#1234563). * CVE-2023-45288: golang.org/x/net/http2: no limit set for number of HTTP/2 CONTINUATION frames that can be read for an HTTP/2 request can lead to excessive CPU consumption and a DoS (bsc#1236533). Other updates and bugfixes: * Version 20250506.01: * Make sure agent added connections are activated by NM (#534) * Version 20250506.00: * Wrap NSS cache refresh in a goroutine (#533) * Version 20250502.01: * Wicked: Only reload interfaces for which configurations are written or changed. (#524)

Topics%20covered

Topics Covered

security advisory denial of service important SuSE Linux authorization bypass Google Guest Agent

References

* bsc#1234563

* bsc#1236533

* bsc#1239763

* bsc#1239866

* bsc#1243254

* bsc#1243505

Cross-

* CVE-2023-45288

* CVE-2024-45337

CVSS scores:

* CVE-2023-45288 ( SUSE ): 6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

* CVE-2023-45288 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

* CVE-2023-45288 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2024-45337 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-45337 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products:

* SUSE Linux Enterprise Server 16.0

* SUSE Linux Enterprise Server for SAP applications 16.0

An update that solves two vulnerabilities and has four fixes can now be

installed.

##

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:21376-1
Release Date: 2026-04-22T10:52:20Z
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service important SuSE Linux authorization bypass Google Guest Agent

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here