Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

SUSE: 2021:3476-1 Important: xstream Code Execution and DoS Risks

suse
Calendar Grey October 20, 2021
Scroller Suse
Addresses 14 security flaws in xstream, encompassing risks of remote code execution and Denial of Service for various SUSE components.
An update that fixes 14 vulnerabilities is now available

Summary

This update for xstream fixes the following issues: - Upgrade to 1.4.18 - CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the processed input stream with type information. (bsc#1189798) - CVE-2021-39140: Fixed an issue that allowed an attacker to execute a DoS attack by manipulating the processed input stream. (bsc#1189798) - CVE-2021-39141: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39144: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39145: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39146: Fixed an issue that allowed an attacker to achieve

Topics%20covered

Topics Covered

security advisory code execution DoS attack patch important SUSE Linux xstream

References

#1189798

Cross- CVE-2021-39139 CVE-2021-39140 CVE-2021-39141

CVE-2021-39144 CVE-2021-39145 CVE-2021-39146

CVE-2021-39147 CVE-2021-39148 CVE-2021-39149

CVE-2021-39150 CVE-2021-39151 CVE-2021-39152

CVE-2021-39153 CVE-2021-39154

CVSS scores:

CVE-2021-39139 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CVE-2021-39139 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2021-39140 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2021-39141 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CVE-2021-39141 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2021-39144 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CVE-2021-39144 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:3476-1
Rating: important

Topics%20covered

Topics Covered

security advisory code execution DoS attack patch important SUSE Linux xstream

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.