Skip to content
Sign in
7.3 High

CVE-2020-8027 A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise…

Description

A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.37.1. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.37.1. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.18.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.9.1.

Affected products and versions

Product Affected versions Fixed in
SUSE Linux Enterprise Server 15-LTSS 2.4 earliest → < 2.4.46-9.37.1 2.4.46-9.37.1
SUSE Linux Enterprise Server for SAP 15 2.4 earliest → < 2.4.46-9.37.1 2.4.46-9.37.1
openSUSE Leap 15.1 2.4 earliest → < 2.4.46-lp151.10.18.1 2.4.46-lp151.10.18.1
openSUSE Leap 15.2 2.4 earliest → < 2.4.46-lp152.14.9.1 2.4.46-lp152.14.9.1

Other CVEs of SUSE Linux Enterprise Server 15-LTSS

The 7 CVEs of SUSE Linux Enterprise Server 15-LTSS →
CVE-2020-8023 A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE… 7.7 High CVE-2020-8025 A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server… 6.1 Medium CVE-2020-8022 A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux… 7.7 High CVE-2019-18904 A Uncontrolled Resource Consumption vulnerability in rmt of SUSE Linux Enterprise High Performance Computing 15-ESPOS,… 6.5 Medium
Track this CVE