CVE-2024-36275

What it actually does

NULL pointer dereference triggered by local authenticated access in the affected management software leads to a crash or denial of service condition.

Why it matters to the business

Systems relying on the vulnerable software can experience unexpected outages or degraded availability, requiring administrative intervention to restore service; prevalence across multiple SUSE and openSUSE distributions increases exposure for enterprise Linux environments.

How an attack unfolds

An authenticated local user interacts with the management interface or API in a manner that dereferences a null pointer, causing the process to terminate and denying service to other users or dependent applications.

How to fix it

Upgrade gnutls packages on SUSE Linux Enterprise Micro 5.4, 5.5, Module for Basesystem 15 SP5, openSUSE Leap Micro 5.4, and Leap 15.5 to version 3.7.3-150400.4.44.1 or later; apply vendor patches promptly given the 700 days since publication.

How to confirm the fix worked

Verify installed package versions match or exceed the listed fixed releases; re-test management functionality under local authenticated sessions to confirm absence of crashes.

Typical attack path

1. Obtain local authenticated access on a system running the vulnerable software
2. Invoke the management functionality or API call that triggers the null pointer condition
3. Observe process crash and resulting denial of service

How to detect it

Review system and application logs for unexpected process terminations or segmentation faults associated with the management software; correlate with local user sessions around the time of outage.

What your security team should do

• Prioritize patching all listed gnutls packages to the specified fixed versions
• Restrict local access to management interfaces where possible until patches are applied
• Monitor for availability alerts on affected systems