Test ID:	1.3.6.1.4.1.25623.1.1.4.2021.3887.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2021:3887-1)
Summary:	The remote host is missing an update for the 'openssh' package(s) announced via the SUSE-SU-2021:3887-1 advisory.
Description:	Summary: The remote host is missing an update for the 'openssh' package(s) announced via the SUSE-SU-2021:3887-1 advisory. Vulnerability Insight: This update for openssh fixes the following issues: - CVE-2021-41617: Fixed privilege escalation when AuthorizedKeysCommand/AuthorizedPrincipalsCommand are configured (bsc#1190975). Affected Software/OS: 'openssh' package(s) on SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server for SAP Applications 15. Solution: Please install the updated package(s). CVSS Score: 4.4 CVSS Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-41617 https://bugzilla.suse.com/show_bug.cgi?id=1190975 https://security.netapp.com/advisory/ntap-20211014-0004/ Debian Security Information: DSA-5586 (Google Search) https://www.debian.org/security/2023/dsa-5586 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/ https://www.starwindsoftware.com/security/sw-20220805-0001/ https://www.tenable.com/plugins/nessus/154174 https://www.openssh.com/security.html https://www.openssh.com/txt/release-8.8 https://www.openwall.com/lists/oss-security/2021/09/26/1 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.