Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2020-1193-1.NASL
HistoryMay 11, 2020 - 12:00 a.m.

SUSE SLES12 Security Update : openldap2 (SUSE-SU-2020:1193-1)

2020-05-1100:00:00
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
13

7.6 High

AI Score

Confidence

High

JSON

This update for openldap2 fixes the following issues :

CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2020:1193-1.
# The text itself is copyright (C) SUSE.
#

include('compat.inc');

if (description)
{
  script_id(136466);
  script_version("1.6");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/03/13");

  script_cve_id("CVE-2020-12243");
  script_xref(name:"IAVB", value:"2020-B-0028-S");

  script_name(english:"SUSE SLES12 Security Update : openldap2 (SUSE-SU-2020:1193-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote SUSE host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"This update for openldap2 fixes the following issues :

CVE-2020-12243: Fixed a denial of service related to recursive filters
(bsc#1170771).

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1170771");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2020-12243/");
  # https://www.suse.com/support/update/announcement/2020/suse-su-20201193-1/
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?ce5528d6");
  script_set_attribute(attribute:"solution", value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE OpenStack Cloud Crowbar 8 :

zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2020-1193=1

SUSE OpenStack Cloud 8 :

zypper in -t patch SUSE-OpenStack-Cloud-8-2020-1193=1

SUSE OpenStack Cloud 7 :

zypper in -t patch SUSE-OpenStack-Cloud-7-2020-1193=1

SUSE Linux Enterprise Software Development Kit 12-SP5 :

zypper in -t patch SUSE-SLE-SDK-12-SP5-2020-1193=1

SUSE Linux Enterprise Software Development Kit 12-SP4 :

zypper in -t patch SUSE-SLE-SDK-12-SP4-2020-1193=1

SUSE Linux Enterprise Server for SAP 12-SP3 :

zypper in -t patch SUSE-SLE-SAP-12-SP3-2020-1193=1

SUSE Linux Enterprise Server for SAP 12-SP2 :

zypper in -t patch SUSE-SLE-SAP-12-SP2-2020-1193=1

SUSE Linux Enterprise Server 12-SP5 :

zypper in -t patch SUSE-SLE-SERVER-12-SP5-2020-1193=1

SUSE Linux Enterprise Server 12-SP4 :

zypper in -t patch SUSE-SLE-SERVER-12-SP4-2020-1193=1

SUSE Linux Enterprise Server 12-SP3-LTSS :

zypper in -t patch SUSE-SLE-SERVER-12-SP3-2020-1193=1

SUSE Linux Enterprise Server 12-SP3-BCL :

zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2020-1193=1

SUSE Linux Enterprise Server 12-SP2-LTSS :

zypper in -t patch SUSE-SLE-SERVER-12-SP2-2020-1193=1

SUSE Linux Enterprise Server 12-SP2-BCL :

zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2020-1193=1

SUSE Enterprise Storage 5 :

zypper in -t patch SUSE-Storage-5-2020-1193=1

HPE Helion Openstack 8 :

zypper in -t patch HPE-Helion-OpenStack-8-2020-1193=1");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-12243");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2020/04/28");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/05/05");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/05/11");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libldap-2_4");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libldap-2_4-2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libldap-2_4-2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:openldap2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:openldap2-back-meta");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:openldap2-back-meta-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:openldap2-client");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:openldap2-client-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:openldap2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:openldap2-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:openldap2-ppolicy-check-password");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:openldap2-ppolicy-check-password-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:12");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLES12)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLES12", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES12" && (! preg(pattern:"^(2|3|4|5)$", string:sp))) audit(AUDIT_OS_NOT, "SLES12 SP2/3/4/5", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES12", sp:"4", reference:"libldap-2_4-2-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libldap-2_4-2-32bit-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libldap-2_4-2-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libldap-2_4-2-debuginfo-32bit-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"openldap2-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"openldap2-back-meta-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"openldap2-back-meta-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"openldap2-client-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"openldap2-client-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"openldap2-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"openldap2-debugsource-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"openldap2-ppolicy-check-password-1.2-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"openldap2-ppolicy-check-password-debuginfo-1.2-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libldap-2_4-2-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libldap-2_4-2-32bit-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libldap-2_4-2-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libldap-2_4-2-debuginfo-32bit-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"openldap2-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"openldap2-back-meta-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"openldap2-back-meta-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"openldap2-client-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"openldap2-client-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"openldap2-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"openldap2-debugsource-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"openldap2-ppolicy-check-password-1.2-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"openldap2-ppolicy-check-password-debuginfo-1.2-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libldap-2_4-2-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libldap-2_4-2-32bit-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libldap-2_4-2-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libldap-2_4-2-debuginfo-32bit-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"openldap2-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"openldap2-back-meta-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"openldap2-back-meta-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"openldap2-client-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"openldap2-client-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"openldap2-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"openldap2-debugsource-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"openldap2-ppolicy-check-password-1.2-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"openldap2-ppolicy-check-password-debuginfo-1.2-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libldap-2_4-2-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libldap-2_4-2-32bit-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libldap-2_4-2-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libldap-2_4-2-debuginfo-32bit-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"openldap2-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"openldap2-back-meta-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"openldap2-back-meta-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"openldap2-client-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"openldap2-client-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"openldap2-debuginfo-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"openldap2-debugsource-2.4.41-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"openldap2-ppolicy-check-password-1.2-18.68.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"openldap2-ppolicy-check-password-debuginfo-1.2-18.68.1")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "openldap2");
}
VendorProductVersionCPE
novellsuse_linuxlibldap-2_4p-cpe:/a:novell:suse_linux:libldap-2_4
novellsuse_linuxlibldap-2_4-2p-cpe:/a:novell:suse_linux:libldap-2_4-2
novellsuse_linuxlibldap-2_4-2-debuginfop-cpe:/a:novell:suse_linux:libldap-2_4-2-debuginfo
novellsuse_linuxopenldap2p-cpe:/a:novell:suse_linux:openldap2
novellsuse_linuxopenldap2-back-metap-cpe:/a:novell:suse_linux:openldap2-back-meta
novellsuse_linuxopenldap2-back-meta-debuginfop-cpe:/a:novell:suse_linux:openldap2-back-meta-debuginfo
novellsuse_linuxopenldap2-clientp-cpe:/a:novell:suse_linux:openldap2-client
novellsuse_linuxopenldap2-client-debuginfop-cpe:/a:novell:suse_linux:openldap2-client-debuginfo
novellsuse_linuxopenldap2-debuginfop-cpe:/a:novell:suse_linux:openldap2-debuginfo
novellsuse_linuxopenldap2-debugsourcep-cpe:/a:novell:suse_linux:openldap2-debugsource
Rows per page:
1-10 of 131

Related

nessus 34
openvas 9
osv 4
checkpoint_advisories 1
amazon 1
debian 3
freebsd 1
ubuntu 2
f5 1
prion 1
alpinelinux 1
debiancve 1
suse 1
oraclelinux 1
veracode 1
cve 1
redhat 8
ubuntucve 1
redhatcve 1
centos 1
mageia 1
photon 6
ics 2
apple 2
oracle 2
nessus
nessus
EulerOS 2.0 SP2 : openldap (EulerOS-SA-2020-1685)
2020-06-17 00:00:00
openSUSE Security Update : openldap2 (openSUSE-2020-647)
2020-05-12 00:00:00
CentOS 7 : openldap (CESA-2020:4041)
2020-10-20 00:00:00
openvas
openvas
Debian LTS: Security Advisory for openldap (DLA-2199-1)
2020-05-03 00:00:00
openSUSE: Security Advisory for openldap2 (openSUSE-SU-2020:0647-1)
2020-05-12 00:00:00
Debian: Security Advisory for openldap (DSA-4666-1)
2020-04-30 00:00:00
osv
osv
CVE-2020-12243
2020-04-28 19:15:12
openldap - security update
2020-04-28 00:00:00
BIT-openldap-2020-12243
2024-03-06 11:02:43
checkpoint_advisories
checkpoint_advisories
OpenLDAP Slapd Denial of Service (CVE-2020-12243)
2020-06-30 00:00:00
amazon
amazon
Medium: openldap
2020-10-22 18:29:00
debian
debian
[SECURITY] [DSA 4666-1] openldap security update
2020-04-28 19:09:22
[SECURITY] [DSA 4666-1] openldap security update
2020-04-28 19:09:22
[SECURITY] [DLA 2199-1] openldap security update
2020-05-02 12:52:54
freebsd
freebsd
nested filters leads to stack overflow
2020-04-28 00:00:00
ubuntu
ubuntu
OpenLDAP vulnerability
2020-05-06 00:00:00
OpenLDAP vulnerability
2020-05-06 00:00:00
f5
f5
K45243961 : OpenLDAP vulnerability CVE-2020-12243
2020-09-01 00:00:00
prion
prion
Denial of service
2020-04-28 19:15:00
alpinelinux
alpinelinux
CVE-2020-12243
2020-04-28 19:15:00
debiancve
debiancve
CVE-2020-12243
2020-04-28 19:15:00
suse
suse
Security update for openldap2 (important)
2020-05-11 00:00:00
oraclelinux
oraclelinux
openldap security update
2020-10-06 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-08-06 21:39:59
cve
cve
CVE-2020-12243
2020-04-28 19:15:00
redhat
redhat
(RHSA-2020:4041) Moderate: openldap security update
2020-09-29 07:54:05
(RHSA-2021:0949) Low: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update
2021-03-22 09:48:51
(RHSA-2020:4254) Moderate: security update - Red Hat Ansible Tower 3.7 runner release (CVE-2019-18874)
2020-10-14 12:50:53
ubuntucve
ubuntucve
CVE-2020-12243
2020-04-28 00:00:00
redhatcve
redhatcve
CVE-2020-12243
2020-05-08 20:09:54
centos
centos
openldap security update
2020-10-20 18:35:51
mageia
mageia
Updated openldap packages fix security vulnerabilities
2020-05-05 15:20:37
photon
photon
Important Photon OS Security Update - PHSA-2020-0089
2020-05-13 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0293
2020-05-12 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0089
2020-05-13 00:00:00
ics
ics
Hitachi Energy System Data Manager
2022-04-26 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
apple
apple
About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra - Apple Support
2020-12-15 06:08:19
About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra
2020-07-15 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00

7.6 High

AI Score

Confidence

High

JSON
Related for SUSE_SU-2020-1193-1.NASL
nessus34openvas9osv4checkpoint_advisories1amazon1debian3freebsd1ubuntu2f51prion1alpinelinux1debiancve1suse1oraclelinux1veracode1cve1redhat8ubuntucve1redhatcve1centos1mageia1photon6ics2apple2oracle2