CVE-2020-35518 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2020-35518 Interim 1 33 2025-02-17T01:07:36Z current 2021-05-30T14:45:50Z 2025-02-17T01:07:36Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2020-35518 When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2021-May/008819.html E-Mail link for SUSE-CU-2021:178-1 https://lists.suse.com/pipermail/sle-security-updates/2021-March/008440.html E-Mail link for SUSE-SU-2021:0724-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IJZAIJRIBNKFP5CET6TYMJ3FGMU6WYAM/ E-Mail link for openSUSE-SU-2021:0418-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Liberty Linux 7 SUSE Liberty Linux 8 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 openSUSE Leap 15.2 389-ds 389-ds-1.4.3.19~git0.bef0b5bed-3.12.1 389-ds-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 389-ds-base-1.3.10.2-12.el7_9 389-ds-base-1.4.3.8-7.module+el8.3.0+10310+6e88d919 389-ds-base-devel-1.3.10.2-12.el7_9 389-ds-base-devel-1.4.3.8-7.module+el8.3.0+10310+6e88d919 389-ds-base-legacy-tools-1.4.3.8-7.module+el8.3.0+10310+6e88d919 389-ds-base-libs-1.3.10.2-12.el7_9 389-ds-base-libs-1.4.3.8-7.module+el8.3.0+10310+6e88d919 389-ds-base-snmp-1.3.10.2-12.el7_9 389-ds-base-snmp-1.4.3.8-7.module+el8.3.0+10310+6e88d919 389-ds-devel 389-ds-devel-1.4.3.19~git0.bef0b5bed-3.12.1 389-ds-devel-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 389-ds-snmp 389-ds-snmp-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 lib389 lib389-1.4.3.19~git0.bef0b5bed-3.12.1 lib389-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 libsvrcore0 libsvrcore0-1.4.3.19~git0.bef0b5bed-3.12.1 libsvrcore0-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 python3-lib389-1.4.3.8-7.module+el8.3.0+10310+6e88d919 389-ds-base-1.3.10.2-12.el7_9 as a component of SUSE Liberty Linux 7 389-ds-base-devel-1.3.10.2-12.el7_9 as a component of SUSE Liberty Linux 7 389-ds-base-libs-1.3.10.2-12.el7_9 as a component of SUSE Liberty Linux 7 389-ds-base-snmp-1.3.10.2-12.el7_9 as a component of SUSE Liberty Linux 7 389-ds-base-1.4.3.8-7.module+el8.3.0+10310+6e88d919 as a component of SUSE Liberty Linux 8 389-ds-base-devel-1.4.3.8-7.module+el8.3.0+10310+6e88d919 as a component of SUSE Liberty Linux 8 389-ds-base-legacy-tools-1.4.3.8-7.module+el8.3.0+10310+6e88d919 as a component of SUSE Liberty Linux 8 389-ds-base-libs-1.4.3.8-7.module+el8.3.0+10310+6e88d919 as a component of SUSE Liberty Linux 8 389-ds-base-snmp-1.4.3.8-7.module+el8.3.0+10310+6e88d919 as a component of SUSE Liberty Linux 8 python3-lib389-1.4.3.8-7.module+el8.3.0+10310+6e88d919 as a component of SUSE Liberty Linux 8 389-ds-1.4.3.19~git0.bef0b5bed-3.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 389-ds-devel-1.4.3.19~git0.bef0b5bed-3.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 lib389-1.4.3.19~git0.bef0b5bed-3.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libsvrcore0-1.4.3.19~git0.bef0b5bed-3.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 389-ds-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 as a component of openSUSE Leap 15.2 389-ds-devel-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 as a component of openSUSE Leap 15.2 389-ds-snmp-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 as a component of openSUSE Leap 15.2 lib389-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 as a component of openSUSE Leap 15.2 libsvrcore0-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 as a component of openSUSE Leap 15.2 389-ds as a component of SUSE CaaS Platform 4.0 389-ds-devel as a component of SUSE CaaS Platform 4.0 389-ds-snmp as a component of SUSE CaaS Platform 4.0 lib389 as a component of SUSE CaaS Platform 4.0 libsvrcore0 as a component of SUSE CaaS Platform 4.0 389-ds as a component of SUSE Enterprise Storage 6 389-ds as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS 389-ds-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS 389-ds-snmp as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS lib389 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libsvrcore0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS 389-ds as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS 389-ds-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS 389-ds-snmp as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS lib389 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libsvrcore0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS 389-ds as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS 389-ds-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libsvrcore0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS 389-ds as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 389-ds-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 lib389 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libsvrcore0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 389-ds as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 389-ds-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 lib389 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libsvrcore0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 389-ds as a component of SUSE Linux Enterprise Server 15 SP1-LTSS 389-ds-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS 389-ds-snmp as a component of SUSE Linux Enterprise Server 15 SP1-LTSS lib389 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libsvrcore0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS 389-ds as a component of SUSE Linux Enterprise Server 15-ESPOS 389-ds as a component of SUSE Linux Enterprise Server 15-LTSS 389-ds-devel as a component of SUSE Linux Enterprise Server 15-LTSS libsvrcore0 as a component of SUSE Linux Enterprise Server 15-LTSS 389-ds as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 389-ds as a component of SUSE Linux Enterprise Server for SAP Applications 15 389-ds-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 libsvrcore0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 389-ds as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 389-ds-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 389-ds-snmp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 lib389 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libsvrcore0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database. CVE-2020-35518 SUSE Liberty Linux 7:389-ds-base-1.3.10.2-12.el7_9 SUSE Liberty Linux 7:389-ds-base-devel-1.3.10.2-12.el7_9 SUSE Liberty Linux 7:389-ds-base-libs-1.3.10.2-12.el7_9 SUSE Liberty Linux 7:389-ds-base-snmp-1.3.10.2-12.el7_9 SUSE Liberty Linux 8:389-ds-base-1.4.3.8-7.module+el8.3.0+10310+6e88d919 SUSE Liberty Linux 8:389-ds-base-devel-1.4.3.8-7.module+el8.3.0+10310+6e88d919 SUSE Liberty Linux 8:389-ds-base-legacy-tools-1.4.3.8-7.module+el8.3.0+10310+6e88d919 SUSE Liberty Linux 8:389-ds-base-libs-1.4.3.8-7.module+el8.3.0+10310+6e88d919 SUSE Liberty Linux 8:389-ds-base-snmp-1.4.3.8-7.module+el8.3.0+10310+6e88d919 SUSE Liberty Linux 8:python3-lib389-1.4.3.8-7.module+el8.3.0+10310+6e88d919 SUSE Linux Enterprise Module for Server Applications 15 SP2:389-ds-1.4.3.19~git0.bef0b5bed-3.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:389-ds-devel-1.4.3.19~git0.bef0b5bed-3.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:lib389-1.4.3.19~git0.bef0b5bed-3.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:libsvrcore0-1.4.3.19~git0.bef0b5bed-3.12.1 openSUSE Leap 15.2:389-ds-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 openSUSE Leap 15.2:389-ds-devel-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 openSUSE Leap 15.2:389-ds-snmp-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 openSUSE Leap 15.2:lib389-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 openSUSE Leap 15.2:libsvrcore0-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:389-ds SUSE Linux Enterprise Module for Server Applications 15 SP3:389-ds-devel SUSE Linux Enterprise Module for Server Applications 15 SP3:lib389 SUSE Linux Enterprise Module for Server Applications 15 SP3:libsvrcore0 SUSE Linux Enterprise Module for Server Applications 15 SP4:389-ds SUSE Linux Enterprise Module for Server Applications 15 SP4:389-ds-devel SUSE Linux Enterprise Module for Server Applications 15 SP4:lib389 SUSE Linux Enterprise Module for Server Applications 15 SP4:libsvrcore0 SUSE CaaS Platform 4.0:389-ds SUSE CaaS Platform 4.0:389-ds-devel SUSE CaaS Platform 4.0:389-ds-snmp SUSE CaaS Platform 4.0:lib389 SUSE CaaS Platform 4.0:libsvrcore0 SUSE Enterprise Storage 6:389-ds SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:389-ds SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:389-ds-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:389-ds-snmp SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:lib389 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libsvrcore0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:389-ds SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:389-ds-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:389-ds-snmp SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:lib389 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libsvrcore0 SUSE Linux Enterprise High Performance Computing 15-LTSS:389-ds SUSE Linux Enterprise High Performance Computing 15-LTSS:389-ds-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:libsvrcore0 SUSE Linux Enterprise Server 15 SP1-LTSS:389-ds SUSE Linux Enterprise Server 15 SP1-LTSS:389-ds-devel SUSE Linux Enterprise Server 15 SP1-LTSS:389-ds-snmp SUSE Linux Enterprise Server 15 SP1-LTSS:lib389 SUSE Linux Enterprise Server 15 SP1-LTSS:libsvrcore0 SUSE Linux Enterprise Server 15-ESPOS:389-ds SUSE Linux Enterprise Server 15-LTSS:389-ds SUSE Linux Enterprise Server 15-LTSS:389-ds-devel SUSE Linux Enterprise Server 15-LTSS:libsvrcore0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:389-ds SUSE Linux Enterprise Server for SAP Applications 15 SP1:389-ds SUSE Linux Enterprise Server for SAP Applications 15 SP1:389-ds-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:389-ds-snmp SUSE Linux Enterprise Server for SAP Applications 15 SP1:lib389 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libsvrcore0 SUSE Linux Enterprise Server for SAP Applications 15:389-ds SUSE Linux Enterprise Server for SAP Applications 15:389-ds-devel SUSE Linux Enterprise Server for SAP Applications 15:libsvrcore0 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N