Opensuse OPENLDAP2 vulnerabilities

3 CVEs affecting Opensuse OPENLDAP2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-31253, published 2022-11-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-8023, published 2020-09-01. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enterprise Storage 5, SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise…
CVE-2022-31253, published 2022-11-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this…
CVE-2020-8027, published 2021-02-11. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to…