CVE-2020-14871 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2020-14871 Interim 1 39 2025-02-17T01:23:59Z current 2021-05-30T14:41:41Z 2025-02-17T01:23:59Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2020-14871 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. Note: This CVE is not exploitable for Solaris 11.1 and later releases, and ZFSSA 8.7 and later releases, thus the CVSS Base Score is 0.0. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Point of Service 11 SP3 SUSE Linux Enterprise Point of Service Image Server 12 SP2 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openssh openssh-fips openssh-helpers openssh as a component of HPE Helion OpenStack 8 openssh-fips as a component of HPE Helion OpenStack 8 openssh-helpers as a component of HPE Helion OpenStack 8 openssh as a component of SUSE CaaS Platform 4.0 openssh-fips as a component of SUSE CaaS Platform 4.0 openssh-helpers as a component of SUSE CaaS Platform 4.0 openssh as a component of SUSE Enterprise Storage 6 openssh as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 openssh as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openssh-fips as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openssh-helpers as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openssh as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openssh-fips as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openssh-helpers as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openssh as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 openssh-helpers as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 openssh-fips as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 openssh as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 openssh as a component of SUSE Linux Enterprise Point of Service 11 SP3 openssh as a component of SUSE Linux Enterprise Point of Service Image Server 12 SP2 openssh as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata openssh as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata openssh as a component of SUSE Linux Enterprise Server 11 SP4 LTSS openssh as a component of SUSE Linux Enterprise Server 12 SP2-BCL openssh-fips as a component of SUSE Linux Enterprise Server 12 SP2-BCL openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP2-BCL openssh as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS openssh-fips as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS openssh as a component of SUSE Linux Enterprise Server 12 SP2-LTSS openssh-fips as a component of SUSE Linux Enterprise Server 12 SP2-LTSS openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP2-LTSS openssh as a component of SUSE Linux Enterprise Server 12 SP3-BCL openssh-fips as a component of SUSE Linux Enterprise Server 12 SP3-BCL openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP3-BCL openssh as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS openssh-fips as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS openssh as a component of SUSE Linux Enterprise Server 12 SP3-LTSS openssh-fips as a component of SUSE Linux Enterprise Server 12 SP3-LTSS openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP3-LTSS openssh as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS openssh-fips as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS openssh as a component of SUSE Linux Enterprise Server 12 SP4-LTSS openssh-fips as a component of SUSE Linux Enterprise Server 12 SP4-LTSS openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP4-LTSS openssh as a component of SUSE Linux Enterprise Server 12 SP5 openssh-fips as a component of SUSE Linux Enterprise Server 12 SP5 openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP5 openssh as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openssh-fips as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openssh-helpers as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openssh as a component of SUSE Linux Enterprise Server 15-ESPOS openssh as a component of SUSE Linux Enterprise Server 15-LTSS openssh-fips as a component of SUSE Linux Enterprise Server 15-LTSS openssh-helpers as a component of SUSE Linux Enterprise Server 15-LTSS openssh as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 openssh as a component of SUSE Linux Enterprise Server Teradata 12 SP3 openssh as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssh-fips as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssh-helpers as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssh as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssh-fips as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssh-helpers as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssh as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 openssh-fips as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 openssh-helpers as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 openssh as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 openssh as a component of SUSE Linux Enterprise Server for SAP Applications 15 openssh-fips as a component of SUSE Linux Enterprise Server for SAP Applications 15 openssh-helpers as a component of SUSE Linux Enterprise Server for SAP Applications 15 openssh as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 openssh-fips as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 openssh-helpers as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 openssh as a component of SUSE Manager Proxy 4.0 openssh as a component of SUSE Manager Retail Branch Server 4.0 openssh as a component of SUSE Manager Server 4.0 openssh as a component of SUSE OpenStack Cloud 7 openssh-fips as a component of SUSE OpenStack Cloud 7 openssh-helpers as a component of SUSE OpenStack Cloud 7 openssh as a component of SUSE OpenStack Cloud 8 openssh-fips as a component of SUSE OpenStack Cloud 8 openssh-helpers as a component of SUSE OpenStack Cloud 8 openssh as a component of SUSE OpenStack Cloud 9 openssh-fips as a component of SUSE OpenStack Cloud 9 openssh-helpers as a component of SUSE OpenStack Cloud 9 openssh as a component of SUSE OpenStack Cloud Crowbar 8 openssh-fips as a component of SUSE OpenStack Cloud Crowbar 8 openssh-helpers as a component of SUSE OpenStack Cloud Crowbar 8 openssh as a component of SUSE OpenStack Cloud Crowbar 9 openssh-fips as a component of SUSE OpenStack Cloud Crowbar 9 openssh-helpers as a component of SUSE OpenStack Cloud Crowbar 9 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. Note: This CVE is not exploitable for Solaris 11.1 and later releases, and ZFSSA 8.7 and later releases, thus the CVSS Base Score is 0.0. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). CVE-2020-14871 HPE Helion OpenStack 8:openssh HPE Helion OpenStack 8:openssh-fips HPE Helion OpenStack 8:openssh-helpers SUSE CaaS Platform 4.0:openssh SUSE CaaS Platform 4.0:openssh-fips SUSE CaaS Platform 4.0:openssh-helpers SUSE Enterprise Storage 6:openssh SUSE Linux Enterprise High Performance Computing 12 SP5:openssh SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openssh SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openssh-fips SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openssh-helpers SUSE Linux Enterprise High Performance Computing 15-LTSS:openssh SUSE Linux Enterprise High Performance Computing 15-LTSS:openssh-fips SUSE Linux Enterprise High Performance Computing 15-LTSS:openssh-helpers SUSE Linux Enterprise Module for Basesystem 15 SP2:openssh SUSE Linux Enterprise Module for Basesystem 15 SP2:openssh-helpers SUSE Linux Enterprise Module for Server Applications 15 SP2:openssh SUSE Linux Enterprise Module for Server Applications 15 SP2:openssh-fips SUSE Linux Enterprise Point of Service 11 SP3:openssh SUSE Linux Enterprise Point of Service Image Server 12 SP2:openssh SUSE Linux Enterprise Server 11 SP1 for Teradata:openssh SUSE Linux Enterprise Server 11 SP3 for Teradata:openssh SUSE Linux Enterprise Server 11 SP4 LTSS:openssh SUSE Linux Enterprise Server 12 SP2-BCL:openssh SUSE Linux Enterprise Server 12 SP2-BCL:openssh-fips SUSE Linux Enterprise Server 12 SP2-BCL:openssh-helpers SUSE Linux Enterprise Server 12 SP2-ESPOS:openssh SUSE Linux Enterprise Server 12 SP2-ESPOS:openssh-fips SUSE Linux Enterprise Server 12 SP2-ESPOS:openssh-helpers SUSE Linux Enterprise Server 12 SP2-LTSS:openssh SUSE Linux Enterprise Server 12 SP2-LTSS:openssh-fips SUSE Linux Enterprise Server 12 SP2-LTSS:openssh-helpers SUSE Linux Enterprise Server 12 SP3-BCL:openssh SUSE Linux Enterprise Server 12 SP3-BCL:openssh-fips SUSE Linux Enterprise Server 12 SP3-BCL:openssh-helpers SUSE Linux Enterprise Server 12 SP3-ESPOS:openssh SUSE Linux Enterprise Server 12 SP3-ESPOS:openssh-fips SUSE Linux Enterprise Server 12 SP3-ESPOS:openssh-helpers SUSE Linux Enterprise Server 12 SP3-LTSS:openssh SUSE Linux Enterprise Server 12 SP3-LTSS:openssh-fips SUSE Linux Enterprise Server 12 SP3-LTSS:openssh-helpers SUSE Linux Enterprise Server 12 SP4-ESPOS:openssh SUSE Linux Enterprise Server 12 SP4-ESPOS:openssh-fips SUSE Linux Enterprise Server 12 SP4-ESPOS:openssh-helpers SUSE Linux Enterprise Server 12 SP4-LTSS:openssh SUSE Linux Enterprise Server 12 SP4-LTSS:openssh-fips SUSE Linux Enterprise Server 12 SP4-LTSS:openssh-helpers SUSE Linux Enterprise Server 12 SP5:openssh SUSE Linux Enterprise Server 12 SP5:openssh-fips SUSE Linux Enterprise Server 12 SP5:openssh-helpers SUSE Linux Enterprise Server 15 SP1-LTSS:openssh SUSE Linux Enterprise Server 15 SP1-LTSS:openssh-fips SUSE Linux Enterprise Server 15 SP1-LTSS:openssh-helpers SUSE Linux Enterprise Server 15-ESPOS:openssh SUSE Linux Enterprise Server 15-LTSS:openssh SUSE Linux Enterprise Server 15-LTSS:openssh-fips SUSE Linux Enterprise Server 15-LTSS:openssh-helpers SUSE Linux Enterprise Server Business Critical Linux 15 SP1:openssh SUSE Linux Enterprise Server Teradata 12 SP3:openssh SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-fips SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-helpers SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh-fips SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh-helpers SUSE Linux Enterprise Server for SAP Applications 12 SP5:openssh SUSE Linux Enterprise Server for SAP Applications 15 SP1:openssh SUSE Linux Enterprise Server for SAP Applications 15 SP1:openssh-fips SUSE Linux Enterprise Server for SAP Applications 15 SP1:openssh-helpers SUSE Linux Enterprise Server for SAP Applications 15:openssh SUSE Linux Enterprise Server for SAP Applications 15:openssh-fips SUSE Linux Enterprise Server for SAP Applications 15:openssh-helpers SUSE Manager Proxy 4.0:openssh SUSE Manager Retail Branch Server 4.0:openssh SUSE Manager Server 4.0:openssh SUSE OpenStack Cloud 7:openssh SUSE OpenStack Cloud 7:openssh-fips SUSE OpenStack Cloud 7:openssh-helpers SUSE OpenStack Cloud 8:openssh SUSE OpenStack Cloud 8:openssh-fips SUSE OpenStack Cloud 8:openssh-helpers SUSE OpenStack Cloud 9:openssh SUSE OpenStack Cloud 9:openssh-fips SUSE OpenStack Cloud 9:openssh-helpers SUSE OpenStack Cloud Crowbar 8:openssh SUSE OpenStack Cloud Crowbar 8:openssh-fips SUSE OpenStack Cloud Crowbar 8:openssh-helpers SUSE OpenStack Cloud Crowbar 9:openssh SUSE OpenStack Cloud Crowbar 9:openssh-fips SUSE OpenStack Cloud Crowbar 9:openssh-helpers critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H