CVE-2021-31998

Name of the Vulnerable Software and Affected Versions openSUSE Leap versions prior to 2.6.2 SUSE Linux Enterprise Server 11-SP3 version inn-2.4.2-170.21.3.1 and prior versions openSUSE Backports SLE-15-SP2 versions prior to 2.6.2

Description The issue is related to insufficient access control in the inn package, which can be exploited by an attacker to escalate their privileges from the news user to root. This allows local attackers to gain elevated access.

Recommendations For openSUSE Leap versions prior to 2.6.2, update to version 2.6.2 or later. For SUSE Linux Enterprise Server 11-SP3 version inn-2.4.2-170.21.3.1 and prior versions, update to a version later than inn-2.4.2-170.21.3.1. For openSUSE Backports SLE-15-SP2 versions prior to 2.6.2, update to version 2.6.2 or later.