CVE catalog
CVE-2020-8027
Security update for openldap2
- Severity
- High · CVSS 8.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.30% · Oct 25, 2026
This update for openldap2 fixes the following issues: - CVE-2020-8027: openldap_update_modules_path.sh starts daemons unconditionally and uses fixed paths in /tmp (bsc#1175568).
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | openldap2 | linux enterprise module for basesystem 15 sp1 | 2.4.46-9.37.1 | fixed |
| Suse | openldap2 | linux enterprise module for basesystem 15 sp2 | 2.4.46-9.37.1 | fixed |
| Suse | openldap2 | linux enterprise module for development tools 15 sp1 | 2.4.46-9.37.1 | fixed |
| Suse | openldap2 | linux enterprise module for development tools 15 sp2 | 2.4.46-9.37.1 | fixed |
| Suse | openldap2 | linux enterprise module for legacy 15 sp1 | 2.4.46-9.37.1 | fixed |
| Suse | openldap2 | linux enterprise module for legacy 15 sp2 | 2.4.46-9.37.1 | fixed |
| Opensuse | openldap2 | leap 15.2 | 2.4.46-lp152.14.9.1 | fixed |
| Opensuse | openldap2 | leap 15.1 | 2.4.46-lp151.10.18.1 | fixed |
| Suse | openldap2 | linux enterprise high performance computing 15-espos | 2.4.46-9.37.1 | fixed |
| Suse | openldap2 | linux enterprise high performance computing 15-ltss | 2.4.46-9.37.1 | fixed |
| Suse | openldap2 | linux enterprise server 15-ltss | 2.4.46-9.37.1 | fixed |
| Suse | openldap2 | linux enterprise server for sap applications 15 | 2.4.46-9.37.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | openldap2 | rpm | linux enterprise module for basesystem 15 sp1 | 2.4.46-9.37.1 | Not reported | SUSE-SU-2020:2712-1 | Not reported |
| Suse | openldap2 | rpm | linux enterprise module for basesystem 15 sp2 | 2.4.46-9.37.1 | Not reported | SUSE-SU-2020:2712-1 | Not reported |
| Suse | openldap2 | rpm | linux enterprise module for development tools 15 sp1 | 2.4.46-9.37.1 | Not reported | SUSE-SU-2020:2712-1 | Not reported |
| Suse | openldap2 | rpm | linux enterprise module for development tools 15 sp2 | 2.4.46-9.37.1 | Not reported | SUSE-SU-2020:2712-1 | Not reported |
| Suse | openldap2 | rpm | linux enterprise module for legacy 15 sp1 | 2.4.46-9.37.1 | Not reported | SUSE-SU-2020:2712-1 | Not reported |
| Suse | openldap2 | rpm | linux enterprise module for legacy 15 sp2 | 2.4.46-9.37.1 | Not reported | SUSE-SU-2020:2712-1 | Not reported |
| Opensuse | openldap2 | rpm | leap 15.2 | 2.4.46-lp152.14.9.1 | Not reported | OPENSUSE-SU-2020:1539-1 | Not reported |
| Opensuse | openldap2 | rpm | leap 15.1 | 2.4.46-lp151.10.18.1 | Not reported | OPENSUSE-SU-2020:1534-1 | Not reported |
| Suse | openldap2 | rpm | linux enterprise high performance computing 15-espos | 2.4.46-9.37.1 | Not reported | SUSE-SU-2020:2712-2 | Not reported |
| Suse | openldap2 | rpm | linux enterprise high performance computing 15-ltss | 2.4.46-9.37.1 | Not reported | SUSE-SU-2020:2712-2 | Not reported |
| Suse | openldap2 | rpm | linux enterprise server 15-ltss | 2.4.46-9.37.1 | Not reported | SUSE-SU-2020:2712-2 | Not reported |
| Suse | openldap2 | rpm | linux enterprise server for sap applications 15 | 2.4.46-9.37.1 | Not reported | SUSE-SU-2020:2712-2 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2712-1.json]
- [https://osv.dev/vulnerability/SUSE-SU-2020:2712-1]
- [https://osv.dev/vulnerability/SUSE-SU-2020:2712-2]
- [https://osv.dev/vulnerability/openSUSE-SU-2020:1534-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2020:1539-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]