Detections
Analytics

SUSE SLES15 / openSUSE 15 Security Update : conmon (SUSE-SU-2022:4635-1)

high Nessus Plugin ID 169423

Language:

Synopsis

The remote SUSE host is missing a security update.

Description

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:4635-1 advisory.

 conmon was updated to version 2.1.5:

 * don't leak syslog_identifier
 * logging: do not read more that the buf size
 * logging: fix error handling
 * Makefile: Fix install for FreeBSD
 * signal: Track changes to get_signal_descriptor in the FreeBSD version
 * Packit: initial enablement

 Update to version 2.1.4:

 * Fix a bug where conmon crashed when it got a SIGCHLD

 update to 2.1.3:

 * Stop using g_unix_signal_add() to avoid threads
 * Rename CLI optionlog-size-global-max to log-global-size-max

 Update to version 2.1.2:

 * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 bsc#1200285)
 * journald: print tag and name if both are specified
 * drop some logs to debug level

 Update to version 2.1.0

 * logging: buffer partial messages to journald
 * exit: close all fds >= 3
 * fix: cgroup: Free memory_cgroup_file_path if open fails.

 Update to version 2.0.32

 * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
 * exit_command: Fix: unset subreaper attribute before running exit command

 Update to version 2.0.31
 * logging: new mode -l passthrough
 * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
 * conmon: Fix: free userdata files before exec cleanup

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected conmon package.

See Also

https://bugzilla.suse.com/1200285

https://www.suse.com/security/cve/CVE-2022-1708

http://www.nessus.org/u?b049fb5b

Plugin Details

Severity: High

ID: 169423

File Name: suse_SU-2022-4635-1.nasl

Version: 1.5

Type: Local

Agent: unix

Published: 12/30/2022

Updated: 6/26/2026

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2022-1708

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:conmon, cpe:/o:novell:suse_linux:15

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 12/29/2022

Vulnerability Publication Date: 6/6/2022

Reference Information

CVE: CVE-2022-1708

SuSE: SUSE-SU-2022:4635-1