Read the docs
TI-2020-06493 Aliases CVE-2020-8023GHSA-jpq8-q698-27vp

Local privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2

Priority LOW 34CWE-349Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enterprise Storage 5, SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server 11-SECURITY, SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to escalate privileges from user ldap to root. This issue affects: SUSE Enterprise Storage 5 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Debuginfo 11-SP3 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Debuginfo 11-SP4 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Point of Sale 11-SP3 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Server 11-SECURITY openldap2-client-openssl1 versions prior to 2.4.26-0.74.13.1. SUSE Linux Enterprise Server 11-SP4-LTSS openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Server 12-SP2-BCL openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP2-LTSS openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP3-BCL openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP3-LTSS openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP4 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP5 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.31.1. SUSE Linux Enterprise Server for SAP 12-SP2 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server for SAP 12-SP3 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.31.1. SUSE OpenStack Cloud 7 openldap2 versions prior to 2.4.41-18.71.2. SUSE OpenStack Cloud 8 openldap2 versions prior to 2.4.41-18.71.2. SUSE OpenStack Cloud Crowbar 8 openldap2 versions prior to 2.4.41-18.71.2. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.12.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.3.1.

Why it matters now

EPSS 0.00407 35th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed SUSE Enterprise Storage 5 (SUSE): 2.4.41-18.71.2SUSE Linux Enterprise Debuginfo 11-SP3 (SUSE): 2.4.26-0.74.13.1,+19 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SUSESUSE Enterprise Storage 5openldap2 to before 2.4.41-18.71.22.4.41-18.71.2Patch availableCNA
SUSESUSE Linux Enterprise Debuginfo 11-SP3openldap2 to before 2.4.26-0.74.13.1,2.4.26-0.74.13.1,Patch availableCNA
SUSESUSE Linux Enterprise Debuginfo 11-SP4openldap2 to before 2.4.26-0.74.13.1,2.4.26-0.74.13.1,Patch availableCNA
SUSESUSE Linux Enterprise Point of Sale 11-SP3openldap2 to before 2.4.26-0.74.13.1,2.4.26-0.74.13.1,Patch availableCNA
SUSESUSE Linux Enterprise Server 11-SECURITYopenldap2-client-openssl1 to before 2.4.26-0.74.13.12.4.26-0.74.13.1Patch availableCNA
SUSESUSE Linux Enterprise Server 11-SP4-LTSSopenldap2 to before 2.4.26-0.74.13.1,2.4.26-0.74.13.1,Patch availableCNA
SUSESUSE Linux Enterprise Server 12-SP2-BCLopenldap2 to before 2.4.41-18.71.22.4.41-18.71.2Patch availableCNA
SUSESUSE Linux Enterprise Server 12-SP2-LTSSopenldap2 to before 2.4.41-18.71.22.4.41-18.71.2Patch availableCNA
SUSESUSE Linux Enterprise Server 12-SP3-BCLopenldap2 to before 2.4.41-18.71.22.4.41-18.71.2Patch availableCNA
SUSESUSE Linux Enterprise Server 12-SP3-LTSSopenldap2 to before 2.4.41-18.71.22.4.41-18.71.2Patch availableCNA
SUSESUSE Linux Enterprise Server 12-SP4openldap2 to before 2.4.41-18.71.22.4.41-18.71.2Patch availableCNA
SUSESUSE Linux Enterprise Server 12-SP5openldap2 to before 2.4.41-18.71.22.4.41-18.71.2Patch availableCNA
SUSESUSE Linux Enterprise Server 15-LTSSopenldap2 to before 2.4.46-9.31.12.4.46-9.31.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP 12-SP2openldap2 to before 2.4.41-18.71.22.4.41-18.71.2Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP 12-SP3openldap2 to before 2.4.41-18.71.22.4.41-18.71.2Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP 15openldap2 to before 2.4.46-9.31.12.4.46-9.31.1Patch availableCNA
SUSESUSE OpenStack Cloud 7openldap2 to before 2.4.41-18.71.22.4.41-18.71.2Patch availableCNA
SUSESUSE OpenStack Cloud 8openldap2 to before 2.4.41-18.71.22.4.41-18.71.2Patch availableCNA
SUSESUSE OpenStack Cloud Crowbar 8openldap2 to before 2.4.41-18.71.22.4.41-18.71.2Patch availableCNA
openSUSEopenSUSE Leap 15.1openldap2 to before 2.4.46-lp151.10.12.12.4.46-lp151.10.12.1Patch availableCNA
openSUSEopenSUSE Leap 15.2openldap2 to before 2.4.46-lp152.14.3.12.4.46-lp152.14.3.1Patch availableCNA
  • SUSE Enterprise Storage 5 VendorSUSE Affected openldap2 to before 2.4.41-18.71.2 Fixed in 2.4.41-18.71.2 Patch available CNA
  • SUSE Linux Enterprise Debuginfo 11-SP3 VendorSUSE Affected openldap2 to before 2.4.26-0.74.13.1, Fixed in 2.4.26-0.74.13.1, Patch available CNA
  • SUSE Linux Enterprise Debuginfo 11-SP4 VendorSUSE Affected openldap2 to before 2.4.26-0.74.13.1, Fixed in 2.4.26-0.74.13.1, Patch available CNA
  • SUSE Linux Enterprise Point of Sale 11-SP3 VendorSUSE Affected openldap2 to before 2.4.26-0.74.13.1, Fixed in 2.4.26-0.74.13.1, Patch available CNA
  • SUSE Linux Enterprise Server 11-SECURITY VendorSUSE Affected openldap2-client-openssl1 to before 2.4.26-0.74.13.1 Fixed in 2.4.26-0.74.13.1 Patch available CNA
  • SUSE Linux Enterprise Server 11-SP4-LTSS VendorSUSE Affected openldap2 to before 2.4.26-0.74.13.1, Fixed in 2.4.26-0.74.13.1, Patch available CNA
  • SUSE Linux Enterprise Server 12-SP2-BCL VendorSUSE Affected openldap2 to before 2.4.41-18.71.2 Fixed in 2.4.41-18.71.2 Patch available CNA
  • SUSE Linux Enterprise Server 12-SP2-LTSS VendorSUSE Affected openldap2 to before 2.4.41-18.71.2 Fixed in 2.4.41-18.71.2 Patch available CNA
  • SUSE Linux Enterprise Server 12-SP3-BCL VendorSUSE Affected openldap2 to before 2.4.41-18.71.2 Fixed in 2.4.41-18.71.2 Patch available CNA
  • SUSE Linux Enterprise Server 12-SP3-LTSS VendorSUSE Affected openldap2 to before 2.4.41-18.71.2 Fixed in 2.4.41-18.71.2 Patch available CNA
  • SUSE Linux Enterprise Server 12-SP4 VendorSUSE Affected openldap2 to before 2.4.41-18.71.2 Fixed in 2.4.41-18.71.2 Patch available CNA
  • SUSE Linux Enterprise Server 12-SP5 VendorSUSE Affected openldap2 to before 2.4.41-18.71.2 Fixed in 2.4.41-18.71.2 Patch available CNA
  • SUSE Linux Enterprise Server 15-LTSS VendorSUSE Affected openldap2 to before 2.4.46-9.31.1 Fixed in 2.4.46-9.31.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP 12-SP2 VendorSUSE Affected openldap2 to before 2.4.41-18.71.2 Fixed in 2.4.41-18.71.2 Patch available CNA
  • SUSE Linux Enterprise Server for SAP 12-SP3 VendorSUSE Affected openldap2 to before 2.4.41-18.71.2 Fixed in 2.4.41-18.71.2 Patch available CNA
  • SUSE Linux Enterprise Server for SAP 15 VendorSUSE Affected openldap2 to before 2.4.46-9.31.1 Fixed in 2.4.46-9.31.1 Patch available CNA
  • SUSE OpenStack Cloud 7 VendorSUSE Affected openldap2 to before 2.4.41-18.71.2 Fixed in 2.4.41-18.71.2 Patch available CNA
  • SUSE OpenStack Cloud 8 VendorSUSE Affected openldap2 to before 2.4.41-18.71.2 Fixed in 2.4.41-18.71.2 Patch available CNA
  • SUSE OpenStack Cloud Crowbar 8 VendorSUSE Affected openldap2 to before 2.4.41-18.71.2 Fixed in 2.4.41-18.71.2 Patch available CNA
  • openSUSE Leap 15.1 VendoropenSUSE Affected openldap2 to before 2.4.46-lp151.10.12.1 Fixed in 2.4.46-lp151.10.12.1 Patch available CNA
  • openSUSE Leap 15.2 VendoropenSUSE Affected openldap2 to before 2.4.46-lp152.14.3.1 Fixed in 2.4.46-lp152.14.3.1 Patch available CNA

CPE configurations NVD · 25

CPEVersionsRoleVendor
cpe:2.3:a:opensuse:openldap2:*:*:*:*:*:*:*:*before 2.4.41-18.71.2VulnerableopenSUSE
cpe:2.3:a:suse:enterprise_storage:5.0:*:*:*:*:*:*:*5.0Running onSUSE
cpe:2.3:a:suse:openstack_cloud:7.0:*:*:*:*:*:*:*7.0Running onSUSE
cpe:2.3:a:suse:openstack_cloud:8.0:*:*:*:*:*:*:*8.0Running onSUSE
cpe:2.3:a:suse:openstack_cloud_crowbar:8.0:*:*:*:*:*:*:*8.0Running onSUSE
cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*12 sp2Running onSUSE
cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:sap:*:*12 sp2Running onSUSE
cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:ltss:*:*:*12 sp2Running onSUSE
cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:*:sap:*:*12 sp3Running onSUSE
cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:-:-:*:*12 sp3Running onSUSE
  • cpe:2.3:a:opensuse:openldap2:*:*:*:*:*:*:*:* Versions before 2.4.41-18.71.2 Vulnerable ·openSUSE
  • cpe:2.3:a:suse:enterprise_storage:5.0:*:*:*:*:*:*:* Versions 5.0 Running on ·SUSE
  • cpe:2.3:a:suse:openstack_cloud:7.0:*:*:*:*:*:*:* Versions 7.0 Running on ·SUSE
  • cpe:2.3:a:suse:openstack_cloud:8.0:*:*:*:*:*:*:* Versions 8.0 Running on ·SUSE
  • cpe:2.3:a:suse:openstack_cloud_crowbar:8.0:*:*:*:*:*:*:* Versions 8.0 Running on ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:* Versions 12 sp2 Running on ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:sap:*:* Versions 12 sp2 Running on ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:ltss:*:*:* Versions 12 sp2 Running on ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:*:sap:*:* Versions 12 sp3 Running on ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:-:-:*:* Versions 12 sp3 Running on ·SUSE
Show 15 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:ltss:*:*:*12 sp3Running onSUSE
cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:*:*:*:*12 sp4Running onSUSE
cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:*:*:*:*12 sp5Running onSUSE
cpe:2.3:a:opensuse:openldap2:*:*:*:*:*:*:*:*before 2.4.26-0.74.13.1VulnerableopenSUSE
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*11 sp3Running onSUSE
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*11 sp4Running onSUSE
cpe:2.3:a:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*11 sp3Running onSUSE
cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*11Running onSUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:ltss:*:*:*11 sp4Running onSUSE
cpe:2.3:a:opensuse:openldap2:*:*:*:*:*:*:*:*before 2.4.46-9.31.1VulnerableopenSUSE
cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:ltss:*:*15Running onSUSE
cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:sap:*:*15Running onSUSE
cpe:2.3:a:opensuse:openldap2:*:*:*:*:*:*:*:*before 2.4.46-lp151.10.12.1VulnerableopenSUSE
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*15.1Running onopenSUSE
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*15.2Running onopenSUSE
  • cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:ltss:*:*:* Versions 12 sp3 Running on ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:*:*:*:* Versions 12 sp4 Running on ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:*:*:*:* Versions 12 sp5 Running on ·SUSE
  • cpe:2.3:a:opensuse:openldap2:*:*:*:*:*:*:*:* Versions before 2.4.26-0.74.13.1 Vulnerable ·openSUSE
  • cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:* Versions 11 sp3 Running on ·SUSE
  • cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:* Versions 11 sp4 Running on ·SUSE
  • cpe:2.3:a:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:* Versions 11 sp3 Running on ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:* Versions 11 Running on ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:ltss:*:*:* Versions 11 sp4 Running on ·SUSE
  • cpe:2.3:a:opensuse:openldap2:*:*:*:*:*:*:*:* Versions before 2.4.46-9.31.1 Vulnerable ·openSUSE
  • cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:ltss:*:* Versions 15 Running on ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:sap:*:* Versions 15 Running on ·SUSE
  • cpe:2.3:a:opensuse:openldap2:*:*:*:*:*:*:*:* Versions before 2.4.46-lp151.10.12.1 Vulnerable ·openSUSE
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Running on ·openSUSE
  • cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:* Versions 15.2 Running on ·openSUSE

Remediation

  • Fix · CNA SUSE Enterprise Storage 5 (SUSE) Fixed in 2.4.41-18.71.2
  • Fix · CNA SUSE Linux Enterprise Debuginfo 11-SP3 (SUSE) Fixed in 2.4.26-0.74.13.1,
  • Fix · CNA SUSE Linux Enterprise Debuginfo 11-SP4 (SUSE) Fixed in 2.4.26-0.74.13.1,
  • Fix · CNA SUSE Linux Enterprise Point of Sale 11-SP3 (SUSE) Fixed in 2.4.26-0.74.13.1,
  • Fix · CNA SUSE Linux Enterprise Server 11-SECURITY (SUSE) Fixed in 2.4.26-0.74.13.1
  • Fix · CNA SUSE Linux Enterprise Server 11-SP4-LTSS (SUSE) Fixed in 2.4.26-0.74.13.1,
  • Fix · CNA SUSE Linux Enterprise Server 12-SP2-BCL (SUSE) Fixed in 2.4.41-18.71.2
  • Fix · CNA SUSE Linux Enterprise Server 12-SP2-LTSS (SUSE) Fixed in 2.4.41-18.71.2
  • Fix · CNA SUSE Linux Enterprise Server 12-SP3-BCL (SUSE) Fixed in 2.4.41-18.71.2
  • Fix · CNA SUSE Linux Enterprise Server 12-SP3-LTSS (SUSE) Fixed in 2.4.41-18.71.2
  • Fix · CNA SUSE Linux Enterprise Server 12-SP4 (SUSE) Fixed in 2.4.41-18.71.2
  • Fix · CNA SUSE Linux Enterprise Server 12-SP5 (SUSE) Fixed in 2.4.41-18.71.2
  • Fix · CNA SUSE Linux Enterprise Server 15-LTSS (SUSE) Fixed in 2.4.46-9.31.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP 12-SP2 (SUSE) Fixed in 2.4.41-18.71.2
  • Fix · CNA SUSE Linux Enterprise Server for SAP 12-SP3 (SUSE) Fixed in 2.4.41-18.71.2
  • Fix · CNA SUSE Linux Enterprise Server for SAP 15 (SUSE) Fixed in 2.4.46-9.31.1
  • Fix · CNA SUSE OpenStack Cloud 7 (SUSE) Fixed in 2.4.41-18.71.2
  • Fix · CNA SUSE OpenStack Cloud 8 (SUSE) Fixed in 2.4.41-18.71.2
  • Fix · CNA SUSE OpenStack Cloud Crowbar 8 (SUSE) Fixed in 2.4.41-18.71.2
  • Fix · CNA openSUSE Leap 15.1 (openSUSE) Fixed in 2.4.46-lp151.10.12.1
  • Fix · CNA openSUSE Leap 15.2 (openSUSE) Fixed in 2.4.46-lp152.14.3.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-8023
  2. 2026-10-03 Alias added: GHSA-jpq8-q698-27vp

References

Exploit 1

  • TI-2016-03560 Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-03506 Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04302 Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04301 Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04298 Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
See all 1331 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences