CVE catalog

CVE-2020-8023

Security update for openldap2

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.41% · Oct 25, 2026

This update for openldap2 fixes the following issues: - CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAP_CONFIG_BACKEND='ldap' was used (bsc#1172698). - Changed DB_CONFIG to root:ldap permissions (bsc#1172704). This update was imported from the SUSE:SLE-15:Update update project.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Opensuseopenldap2leap 15.22.4.46-lp152.14.3.1fixed
Suseopenldap2linux enterprise module for basesystem 15 sp12.4.46-9.31.1fixed
Suseopenldap2linux enterprise module for basesystem 15 sp22.4.46-9.31.1fixed
Suseopenldap2linux enterprise module for development tools 15 sp12.4.46-9.31.1fixed
Suseopenldap2linux enterprise module for development tools 15 sp22.4.46-9.31.1fixed
Suseopenldap2linux enterprise module for legacy 15 sp12.4.46-9.31.1fixed
Suseopenldap2linux enterprise module for legacy 15 sp22.4.46-9.31.1fixed
Suseopenldap2linux enterprise high performance computing 15-espos2.4.46-9.31.1fixed
Suseopenldap2linux enterprise high performance computing 15-ltss2.4.46-9.31.1fixed
Suseopenldap2linux enterprise server 15-ltss2.4.46-9.31.1fixed
Suseopenldap2linux enterprise server for sap applications 152.4.46-9.31.1fixed
Suseopenldap2-client-openssl1linux enterprise server 11-security2.4.26-0.74.13.1fixed
Suseopenldap2linux enterprise point of sale 11 sp32.4.26-0.74.13.1fixed
Suseopenldap2-clientlinux enterprise point of sale 11 sp32.4.26-0.74.13.1fixed
Suseopenldap2linux enterprise server 11 sp4-ltss2.4.26-0.74.13.1fixed
Suseopenldap2-clientlinux enterprise server 11 sp4-ltss2.4.26-0.74.13.1fixed
Suseopenldap2hpe helion openstack 82.4.41-18.71.2fixed
Suseopenldap2openstack cloud 72.4.41-18.71.2fixed
Suseopenldap2openstack cloud 82.4.41-18.71.2fixed
Suseopenldap2openstack cloud crowbar 82.4.41-18.71.2fixed
Suseopenldap2linux enterprise server for sap applications 12 sp22.4.41-18.71.2fixed
Suseopenldap2linux enterprise server for sap applications 12 sp32.4.41-18.71.2fixed
Suseopenldap2linux enterprise software development kit 12 sp42.4.41-18.71.2fixed
Suseopenldap2linux enterprise software development kit 12 sp52.4.41-18.71.2fixed
Suseopenldap2linux enterprise server 12 sp2-ltss2.4.41-18.71.2fixed
Suseopenldap2linux enterprise server 12 sp2-bcl2.4.41-18.71.2fixed
Suseopenldap2linux enterprise server 12 sp3-ltss2.4.41-18.71.2fixed
Suseopenldap2linux enterprise server 12 sp3-bcl2.4.41-18.71.2fixed
Suseopenldap2linux enterprise server 12 sp42.4.41-18.71.2fixed
Suseopenldap2linux enterprise server for sap applications 12 sp42.4.41-18.71.2fixed
Suseopenldap2linux enterprise server 12 sp52.4.41-18.71.2fixed
Suseopenldap2linux enterprise server for sap applications 12 sp52.4.41-18.71.2fixed
Suseopenldap2enterprise storage 52.4.41-18.71.2fixed
Opensuseopenldap2leap 15.12.4.46-lp151.10.12.1fixed
Suseopenldap2linux enterprise module for legacy 122.4.41-18.24.20.2fixed
Suseopenldap2linux enterprise server for sap applications 12 sp22.4.41-18.24.20.2fixed
Suseopenldap2linux enterprise server for sap applications 12 sp32.4.41-18.24.20.2fixed
Suseopenldap2linux enterprise server for sap applications 12 sp42.4.41-18.24.20.2fixed
Suseopenldap2linux enterprise server for sap applications 12 sp52.4.41-18.24.20.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensuseopenldap2rpmleap 15.22.4.46-lp152.14.3.1Not reportedOPENSUSE-SU-2020:0976-1Not reported
Suseopenldap2rpmlinux enterprise module for basesystem 15 sp12.4.46-9.31.1Not reportedSUSE-SU-2020:1856-1Not reported
Suseopenldap2rpmlinux enterprise module for basesystem 15 sp22.4.46-9.31.1Not reportedSUSE-SU-2020:1856-1Not reported
Suseopenldap2rpmlinux enterprise module for development tools 15 sp12.4.46-9.31.1Not reportedSUSE-SU-2020:1856-1Not reported
Suseopenldap2rpmlinux enterprise module for development tools 15 sp22.4.46-9.31.1Not reportedSUSE-SU-2020:1856-1Not reported
Suseopenldap2rpmlinux enterprise module for legacy 15 sp12.4.46-9.31.1Not reportedSUSE-SU-2020:1856-1Not reported
Suseopenldap2rpmlinux enterprise module for legacy 15 sp22.4.46-9.31.1Not reportedSUSE-SU-2020:1856-1Not reported
Suseopenldap2rpmlinux enterprise high performance computing 15-espos2.4.46-9.31.1Not reportedSUSE-SU-2020:1856-1Not reported
Suseopenldap2rpmlinux enterprise high performance computing 15-ltss2.4.46-9.31.1Not reportedSUSE-SU-2020:1856-1Not reported
Suseopenldap2rpmlinux enterprise server 15-ltss2.4.46-9.31.1Not reportedSUSE-SU-2020:1856-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 152.4.46-9.31.1Not reportedSUSE-SU-2020:1856-1Not reported
Suseopenldap2-client-openssl1rpmlinux enterprise server 11-security2.4.26-0.74.13.1Not reportedSUSE-SU-2020:14419-1Not reported
Suseopenldap2rpmlinux enterprise point of sale 11 sp32.4.26-0.74.13.1Not reportedSUSE-SU-2020:14419-1Not reported
Suseopenldap2-clientrpmlinux enterprise point of sale 11 sp32.4.26-0.74.13.1Not reportedSUSE-SU-2020:14419-1Not reported
Suseopenldap2rpmlinux enterprise server 11 sp4-ltss2.4.26-0.74.13.1Not reportedSUSE-SU-2020:14419-1Not reported
Suseopenldap2-clientrpmlinux enterprise server 11 sp4-ltss2.4.26-0.74.13.1Not reportedSUSE-SU-2020:14419-1Not reported
Suseopenldap2rpmhpe helion openstack 82.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmopenstack cloud 72.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmopenstack cloud 82.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmopenstack cloud crowbar 82.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 12 sp22.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 12 sp32.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmlinux enterprise software development kit 12 sp42.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmlinux enterprise software development kit 12 sp52.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmlinux enterprise server 12 sp2-ltss2.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmlinux enterprise server 12 sp2-bcl2.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmlinux enterprise server 12 sp3-ltss2.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmlinux enterprise server 12 sp3-bcl2.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmlinux enterprise server 12 sp42.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 12 sp42.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmlinux enterprise server 12 sp52.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 12 sp52.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Suseopenldap2rpmenterprise storage 52.4.41-18.71.2Not reportedSUSE-SU-2020:1859-1Not reported
Opensuseopenldap2rpmleap 15.12.4.46-lp151.10.12.1Not reportedOPENSUSE-SU-2020:0956-1Not reported
Suseopenldap2rpmlinux enterprise module for legacy 122.4.41-18.24.20.2Not reportedSUSE-SU-2020:1855-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 12 sp22.4.41-18.24.20.2Not reportedSUSE-SU-2020:1855-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 12 sp32.4.41-18.24.20.2Not reportedSUSE-SU-2020:1855-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 12 sp42.4.41-18.24.20.2Not reportedSUSE-SU-2020:1855-1Not reported
Suseopenldap2rpmlinux enterprise server for sap applications 12 sp52.4.41-18.24.20.2Not reportedSUSE-SU-2020:1855-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]