SUSE update for samba

1) Heap-based buffer overflow

EUVDB-ID: #VU51702

Risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2020-27840

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing DNs inside bind requests. A remote attacker can send specially crafted LDAP request to Samba AD DC LDAP server, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Python2: 15-SP3

SUSE Linux Enterprise High Availability: 15-SP3

SUSE Linux Enterprise Micro: 5.1

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

ctdb: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

apparmor-utils-lang: before 2.13.6-150300.3.11.2

apparmor-utils: before 2.13.6-150300.3.11.2

apparmor-profiles: before 2.13.6-150300.3.11.2

apparmor-parser-lang: before 2.13.6-150300.3.11.2

apparmor-docs: before 2.13.6-150300.3.11.2

apparmor-abstractions: before 2.13.6-150300.3.11.2

samba-winbind-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

pam_apparmor-32bit-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor-32bit: before 2.13.6-150300.3.11.2

libtevent0-32bit-debuginfo: before 0.11.0-150300.3.3.2

libtevent0-32bit: before 0.11.0-150300.3.3.2

libtdb1-32bit-debuginfo: before 1.4.4-150300.3.3.2

libtdb1-32bit: before 1.4.4-150300.3.3.2

libtalloc2-32bit-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2-32bit: before 2.3.3-150300.3.3.2

libldb2-32bit-debuginfo: before 2.4.1-150300.3.10.1

libldb2-32bit: before 2.4.1-150300.3.10.1

libapparmor1-32bit-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1-32bit: before 2.13.6-150300.3.11.1

krb5-32bit-debuginfo: before 1.19.2-150300.8.3.2

krb5-32bit: before 1.19.2-150300.8.3.2

samba-ceph-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ceph: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

tevent-man: before 0.11.0-150300.3.3.1

tevent-debugsource: before 0.11.0-150300.3.3.2

tdb-tools-debuginfo: before 1.4.4-150300.3.3.2

tdb-tools: before 1.4.4-150300.3.3.2

tdb-debugsource: before 1.4.4-150300.3.3.2

talloc-man: before 2.3.3-150300.3.3.1

talloc-debugsource: before 2.3.3-150300.3.3.2

sssd-winbind-idmap-debuginfo: before 1.16.1-150300.23.17.3

sssd-winbind-idmap: before 1.16.1-150300.23.17.3

sssd-tools-debuginfo: before 1.16.1-150300.23.17.3

sssd-tools: before 1.16.1-150300.23.17.3

sssd-proxy-debuginfo: before 1.16.1-150300.23.17.3

sssd-proxy: before 1.16.1-150300.23.17.3

sssd-ldap-debuginfo: before 1.16.1-150300.23.17.3

sssd-ldap: before 1.16.1-150300.23.17.3

sssd-krb5-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common: before 1.16.1-150300.23.17.3

sssd-krb5: before 1.16.1-150300.23.17.3

sssd-ipa-debuginfo: before 1.16.1-150300.23.17.3

sssd-ipa: before 1.16.1-150300.23.17.3

sssd-debugsource: before 1.16.1-150300.23.17.3

sssd-dbus-debuginfo: before 1.16.1-150300.23.17.3

sssd-dbus: before 1.16.1-150300.23.17.3

sssd-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-common: before 1.16.1-150300.23.17.3

sssd-ad-debuginfo: before 1.16.1-150300.23.17.3

sssd-ad: before 1.16.1-150300.23.17.3

sssd: before 1.16.1-150300.23.17.3

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-tool: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-gpupdate: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

python3-tevent-debuginfo: before 0.11.0-150300.3.3.2

python3-tevent: before 0.11.0-150300.3.3.2

python3-tdb-debuginfo: before 1.4.4-150300.3.3.2

python3-tdb: before 1.4.4-150300.3.3.2

python3-talloc-devel: before 2.3.3-150300.3.3.2

python3-talloc-debuginfo: before 2.3.3-150300.3.3.2

python3-talloc: before 2.3.3-150300.3.3.2

python3-sssd-config-debuginfo: before 1.16.1-150300.23.17.3

python3-sssd-config: before 1.16.1-150300.23.17.3

python3-ldb-devel: before 2.4.1-150300.3.10.1

python3-ldb-debuginfo: before 2.4.1-150300.3.10.1

python3-ldb: before 2.4.1-150300.3.10.1

python3-apparmor-debuginfo: before 2.13.6-150300.3.11.2

python3-apparmor: before 2.13.6-150300.3.11.2

perl-apparmor-debuginfo: before 2.13.6-150300.3.11.2

perl-apparmor: before 2.13.6-150300.3.11.2

pam_apparmor-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor: before 2.13.6-150300.3.11.2

libtevent0-debuginfo: before 0.11.0-150300.3.3.2

libtevent0: before 0.11.0-150300.3.3.2

libtevent-devel: before 0.11.0-150300.3.3.2

libtdb1-debuginfo: before 1.4.4-150300.3.3.2

libtdb1: before 1.4.4-150300.3.3.2

libtdb-devel: before 1.4.4-150300.3.3.2

libtalloc2-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2: before 2.3.3-150300.3.3.2

libtalloc-devel: before 2.3.3-150300.3.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-150300.23.17.3

libsss_simpleifp0: before 1.16.1-150300.23.17.3

libsss_simpleifp-devel: before 1.16.1-150300.23.17.3

libsss_nss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_nss_idmap0: before 1.16.1-150300.23.17.3

libsss_nss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_idmap0: before 1.16.1-150300.23.17.3

libsss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_certmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_certmap0: before 1.16.1-150300.23.17.3

libsss_certmap-devel: before 1.16.1-150300.23.17.3

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libldb2-debuginfo: before 2.4.1-150300.3.10.1

libldb2: before 2.4.1-150300.3.10.1

libldb-devel: before 2.4.1-150300.3.10.1

libipa_hbac0-debuginfo: before 1.16.1-150300.23.17.3

libipa_hbac0: before 1.16.1-150300.23.17.3

libipa_hbac-devel: before 1.16.1-150300.23.17.3

libapparmor1-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1: before 2.13.6-150300.3.11.1

libapparmor-devel: before 2.13.6-150300.3.11.1

libapparmor-debugsource: before 2.13.6-150300.3.11.1

ldb-tools-debuginfo: before 2.4.1-150300.3.10.1

ldb-tools: before 2.4.1-150300.3.10.1

ldb-debugsource: before 2.4.1-150300.3.10.1

krb5-plugin-preauth-spake-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-spake: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp: before 1.19.2-150300.8.3.2

krb5-devel: before 1.19.2-150300.8.3.2

krb5-client-debuginfo: before 1.19.2-150300.8.3.2

krb5-client: before 1.19.2-150300.8.3.2

krb5: before 1.19.2-150300.8.3.2

apparmor-parser-debuginfo: before 2.13.6-150300.3.11.2

apparmor-parser: before 2.13.6-150300.3.11.2

samba-debugsource: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

krb5-server-debuginfo: before 1.19.2-150300.8.3.2

krb5-server: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap: before 1.19.2-150300.8.3.2

krb5-debugsource: before 1.19.2-150300.8.3.2

krb5-debuginfo: before 1.19.2-150300.8.3.2

apparmor-debugsource: before 2.13.6-150300.3.11.2

apache2-mod_apparmor-debuginfo: before 2.13.6-150300.3.11.2

apache2-mod_apparmor: before 2.13.6-150300.3.11.2

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_module_for_python2:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_server_applications:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-abstractions:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-gpupdate:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220283-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds read

EUVDB-ID: #VU51701

Risk: Medium

CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-20277

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in ldb_handler_fold() function when processing multiple consecutive leading spaces within LDAP query. A remote user can send a specially crafted LDAP query, trigger out-of-bounds read error and crash the LDAP server.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Python2: 15-SP3

SUSE Linux Enterprise High Availability: 15-SP3

SUSE Linux Enterprise Micro: 5.1

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

ctdb: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

apparmor-utils-lang: before 2.13.6-150300.3.11.2

apparmor-utils: before 2.13.6-150300.3.11.2

apparmor-profiles: before 2.13.6-150300.3.11.2

apparmor-parser-lang: before 2.13.6-150300.3.11.2

apparmor-docs: before 2.13.6-150300.3.11.2

apparmor-abstractions: before 2.13.6-150300.3.11.2

samba-winbind-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

pam_apparmor-32bit-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor-32bit: before 2.13.6-150300.3.11.2

libtevent0-32bit-debuginfo: before 0.11.0-150300.3.3.2

libtevent0-32bit: before 0.11.0-150300.3.3.2

libtdb1-32bit-debuginfo: before 1.4.4-150300.3.3.2

libtdb1-32bit: before 1.4.4-150300.3.3.2

libtalloc2-32bit-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2-32bit: before 2.3.3-150300.3.3.2

libldb2-32bit-debuginfo: before 2.4.1-150300.3.10.1

libldb2-32bit: before 2.4.1-150300.3.10.1

libapparmor1-32bit-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1-32bit: before 2.13.6-150300.3.11.1

krb5-32bit-debuginfo: before 1.19.2-150300.8.3.2

krb5-32bit: before 1.19.2-150300.8.3.2

samba-ceph-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ceph: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

tevent-man: before 0.11.0-150300.3.3.1

tevent-debugsource: before 0.11.0-150300.3.3.2

tdb-tools-debuginfo: before 1.4.4-150300.3.3.2

tdb-tools: before 1.4.4-150300.3.3.2

tdb-debugsource: before 1.4.4-150300.3.3.2

talloc-man: before 2.3.3-150300.3.3.1

talloc-debugsource: before 2.3.3-150300.3.3.2

sssd-winbind-idmap-debuginfo: before 1.16.1-150300.23.17.3

sssd-winbind-idmap: before 1.16.1-150300.23.17.3

sssd-tools-debuginfo: before 1.16.1-150300.23.17.3

sssd-tools: before 1.16.1-150300.23.17.3

sssd-proxy-debuginfo: before 1.16.1-150300.23.17.3

sssd-proxy: before 1.16.1-150300.23.17.3

sssd-ldap-debuginfo: before 1.16.1-150300.23.17.3

sssd-ldap: before 1.16.1-150300.23.17.3

sssd-krb5-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common: before 1.16.1-150300.23.17.3

sssd-krb5: before 1.16.1-150300.23.17.3

sssd-ipa-debuginfo: before 1.16.1-150300.23.17.3

sssd-ipa: before 1.16.1-150300.23.17.3

sssd-debugsource: before 1.16.1-150300.23.17.3

sssd-dbus-debuginfo: before 1.16.1-150300.23.17.3

sssd-dbus: before 1.16.1-150300.23.17.3

sssd-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-common: before 1.16.1-150300.23.17.3

sssd-ad-debuginfo: before 1.16.1-150300.23.17.3

sssd-ad: before 1.16.1-150300.23.17.3

sssd: before 1.16.1-150300.23.17.3

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-tool: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-gpupdate: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

python3-tevent-debuginfo: before 0.11.0-150300.3.3.2

python3-tevent: before 0.11.0-150300.3.3.2

python3-tdb-debuginfo: before 1.4.4-150300.3.3.2

python3-tdb: before 1.4.4-150300.3.3.2

python3-talloc-devel: before 2.3.3-150300.3.3.2

python3-talloc-debuginfo: before 2.3.3-150300.3.3.2

python3-talloc: before 2.3.3-150300.3.3.2

python3-sssd-config-debuginfo: before 1.16.1-150300.23.17.3

python3-sssd-config: before 1.16.1-150300.23.17.3

python3-ldb-devel: before 2.4.1-150300.3.10.1

python3-ldb-debuginfo: before 2.4.1-150300.3.10.1

python3-ldb: before 2.4.1-150300.3.10.1

python3-apparmor-debuginfo: before 2.13.6-150300.3.11.2

python3-apparmor: before 2.13.6-150300.3.11.2

perl-apparmor-debuginfo: before 2.13.6-150300.3.11.2

perl-apparmor: before 2.13.6-150300.3.11.2

pam_apparmor-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor: before 2.13.6-150300.3.11.2

libtevent0-debuginfo: before 0.11.0-150300.3.3.2

libtevent0: before 0.11.0-150300.3.3.2

libtevent-devel: before 0.11.0-150300.3.3.2

libtdb1-debuginfo: before 1.4.4-150300.3.3.2

libtdb1: before 1.4.4-150300.3.3.2

libtdb-devel: before 1.4.4-150300.3.3.2

libtalloc2-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2: before 2.3.3-150300.3.3.2

libtalloc-devel: before 2.3.3-150300.3.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-150300.23.17.3

libsss_simpleifp0: before 1.16.1-150300.23.17.3

libsss_simpleifp-devel: before 1.16.1-150300.23.17.3

libsss_nss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_nss_idmap0: before 1.16.1-150300.23.17.3

libsss_nss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_idmap0: before 1.16.1-150300.23.17.3

libsss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_certmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_certmap0: before 1.16.1-150300.23.17.3

libsss_certmap-devel: before 1.16.1-150300.23.17.3

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libldb2-debuginfo: before 2.4.1-150300.3.10.1

libldb2: before 2.4.1-150300.3.10.1

libldb-devel: before 2.4.1-150300.3.10.1

libipa_hbac0-debuginfo: before 1.16.1-150300.23.17.3

libipa_hbac0: before 1.16.1-150300.23.17.3

libipa_hbac-devel: before 1.16.1-150300.23.17.3

libapparmor1-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1: before 2.13.6-150300.3.11.1

libapparmor-devel: before 2.13.6-150300.3.11.1

libapparmor-debugsource: before 2.13.6-150300.3.11.1

ldb-tools-debuginfo: before 2.4.1-150300.3.10.1

ldb-tools: before 2.4.1-150300.3.10.1

ldb-debugsource: before 2.4.1-150300.3.10.1

krb5-plugin-preauth-spake-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-spake: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp: before 1.19.2-150300.8.3.2

krb5-devel: before 1.19.2-150300.8.3.2

krb5-client-debuginfo: before 1.19.2-150300.8.3.2

krb5-client: before 1.19.2-150300.8.3.2

krb5: before 1.19.2-150300.8.3.2

apparmor-parser-debuginfo: before 2.13.6-150300.3.11.2

apparmor-parser: before 2.13.6-150300.3.11.2

samba-debugsource: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

krb5-server-debuginfo: before 1.19.2-150300.8.3.2

krb5-server: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap: before 1.19.2-150300.8.3.2

krb5-debugsource: before 1.19.2-150300.8.3.2

krb5-debuginfo: before 1.19.2-150300.8.3.2

apparmor-debugsource: before 2.13.6-150300.3.11.2

apache2-mod_apparmor-debuginfo: before 2.13.6-150300.3.11.2

apache2-mod_apparmor: before 2.13.6-150300.3.11.2

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_module_for_python2:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_server_applications:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-abstractions:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-gpupdate:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220283-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Race condition

EUVDB-ID: #VU78991

Risk: Low

CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-20316

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to a race condition. A remote user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Python2: 15-SP3

SUSE Linux Enterprise High Availability: 15-SP3

SUSE Linux Enterprise Micro: 5.1

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

ctdb: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

apparmor-utils-lang: before 2.13.6-150300.3.11.2

apparmor-utils: before 2.13.6-150300.3.11.2

apparmor-profiles: before 2.13.6-150300.3.11.2

apparmor-parser-lang: before 2.13.6-150300.3.11.2

apparmor-docs: before 2.13.6-150300.3.11.2

apparmor-abstractions: before 2.13.6-150300.3.11.2

samba-winbind-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

pam_apparmor-32bit-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor-32bit: before 2.13.6-150300.3.11.2

libtevent0-32bit-debuginfo: before 0.11.0-150300.3.3.2

libtevent0-32bit: before 0.11.0-150300.3.3.2

libtdb1-32bit-debuginfo: before 1.4.4-150300.3.3.2

libtdb1-32bit: before 1.4.4-150300.3.3.2

libtalloc2-32bit-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2-32bit: before 2.3.3-150300.3.3.2

libldb2-32bit-debuginfo: before 2.4.1-150300.3.10.1

libldb2-32bit: before 2.4.1-150300.3.10.1

libapparmor1-32bit-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1-32bit: before 2.13.6-150300.3.11.1

krb5-32bit-debuginfo: before 1.19.2-150300.8.3.2

krb5-32bit: before 1.19.2-150300.8.3.2

samba-ceph-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ceph: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

tevent-man: before 0.11.0-150300.3.3.1

tevent-debugsource: before 0.11.0-150300.3.3.2

tdb-tools-debuginfo: before 1.4.4-150300.3.3.2

tdb-tools: before 1.4.4-150300.3.3.2

tdb-debugsource: before 1.4.4-150300.3.3.2

talloc-man: before 2.3.3-150300.3.3.1

talloc-debugsource: before 2.3.3-150300.3.3.2

sssd-winbind-idmap-debuginfo: before 1.16.1-150300.23.17.3

sssd-winbind-idmap: before 1.16.1-150300.23.17.3

sssd-tools-debuginfo: before 1.16.1-150300.23.17.3

sssd-tools: before 1.16.1-150300.23.17.3

sssd-proxy-debuginfo: before 1.16.1-150300.23.17.3

sssd-proxy: before 1.16.1-150300.23.17.3

sssd-ldap-debuginfo: before 1.16.1-150300.23.17.3

sssd-ldap: before 1.16.1-150300.23.17.3

sssd-krb5-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common: before 1.16.1-150300.23.17.3

sssd-krb5: before 1.16.1-150300.23.17.3

sssd-ipa-debuginfo: before 1.16.1-150300.23.17.3

sssd-ipa: before 1.16.1-150300.23.17.3

sssd-debugsource: before 1.16.1-150300.23.17.3

sssd-dbus-debuginfo: before 1.16.1-150300.23.17.3

sssd-dbus: before 1.16.1-150300.23.17.3

sssd-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-common: before 1.16.1-150300.23.17.3

sssd-ad-debuginfo: before 1.16.1-150300.23.17.3

sssd-ad: before 1.16.1-150300.23.17.3

sssd: before 1.16.1-150300.23.17.3

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-tool: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-gpupdate: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

python3-tevent-debuginfo: before 0.11.0-150300.3.3.2

python3-tevent: before 0.11.0-150300.3.3.2

python3-tdb-debuginfo: before 1.4.4-150300.3.3.2

python3-tdb: before 1.4.4-150300.3.3.2

python3-talloc-devel: before 2.3.3-150300.3.3.2

python3-talloc-debuginfo: before 2.3.3-150300.3.3.2

python3-talloc: before 2.3.3-150300.3.3.2

python3-sssd-config-debuginfo: before 1.16.1-150300.23.17.3

python3-sssd-config: before 1.16.1-150300.23.17.3

python3-ldb-devel: before 2.4.1-150300.3.10.1

python3-ldb-debuginfo: before 2.4.1-150300.3.10.1

python3-ldb: before 2.4.1-150300.3.10.1

python3-apparmor-debuginfo: before 2.13.6-150300.3.11.2

python3-apparmor: before 2.13.6-150300.3.11.2

perl-apparmor-debuginfo: before 2.13.6-150300.3.11.2

perl-apparmor: before 2.13.6-150300.3.11.2

pam_apparmor-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor: before 2.13.6-150300.3.11.2

libtevent0-debuginfo: before 0.11.0-150300.3.3.2

libtevent0: before 0.11.0-150300.3.3.2

libtevent-devel: before 0.11.0-150300.3.3.2

libtdb1-debuginfo: before 1.4.4-150300.3.3.2

libtdb1: before 1.4.4-150300.3.3.2

libtdb-devel: before 1.4.4-150300.3.3.2

libtalloc2-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2: before 2.3.3-150300.3.3.2

libtalloc-devel: before 2.3.3-150300.3.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-150300.23.17.3

libsss_simpleifp0: before 1.16.1-150300.23.17.3

libsss_simpleifp-devel: before 1.16.1-150300.23.17.3

libsss_nss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_nss_idmap0: before 1.16.1-150300.23.17.3

libsss_nss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_idmap0: before 1.16.1-150300.23.17.3

libsss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_certmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_certmap0: before 1.16.1-150300.23.17.3

libsss_certmap-devel: before 1.16.1-150300.23.17.3

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libldb2-debuginfo: before 2.4.1-150300.3.10.1

libldb2: before 2.4.1-150300.3.10.1

libldb-devel: before 2.4.1-150300.3.10.1

libipa_hbac0-debuginfo: before 1.16.1-150300.23.17.3

libipa_hbac0: before 1.16.1-150300.23.17.3

libipa_hbac-devel: before 1.16.1-150300.23.17.3

libapparmor1-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1: before 2.13.6-150300.3.11.1

libapparmor-devel: before 2.13.6-150300.3.11.1

libapparmor-debugsource: before 2.13.6-150300.3.11.1

ldb-tools-debuginfo: before 2.4.1-150300.3.10.1

ldb-tools: before 2.4.1-150300.3.10.1

ldb-debugsource: before 2.4.1-150300.3.10.1

krb5-plugin-preauth-spake-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-spake: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp: before 1.19.2-150300.8.3.2

krb5-devel: before 1.19.2-150300.8.3.2

krb5-client-debuginfo: before 1.19.2-150300.8.3.2

krb5-client: before 1.19.2-150300.8.3.2

krb5: before 1.19.2-150300.8.3.2

apparmor-parser-debuginfo: before 2.13.6-150300.3.11.2

apparmor-parser: before 2.13.6-150300.3.11.2

samba-debugsource: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

krb5-server-debuginfo: before 1.19.2-150300.8.3.2

krb5-server: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap: before 1.19.2-150300.8.3.2

krb5-debugsource: before 1.19.2-150300.8.3.2

krb5-debuginfo: before 1.19.2-150300.8.3.2

apparmor-debugsource: before 2.13.6-150300.3.11.2

apache2-mod_apparmor-debuginfo: before 2.13.6-150300.3.11.2

apache2-mod_apparmor: before 2.13.6-150300.3.11.2

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_module_for_python2:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_server_applications:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-abstractions:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-gpupdate:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220283-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) NULL pointer dereference

EUVDB-ID: #VU55287

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-36222

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5). A remote attacker can send a request containing a PA-ENCRYPTED-CHALLENGE padata element without using FAST and perform a denial of service (DoS) attack.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Python2: 15-SP3

SUSE Linux Enterprise High Availability: 15-SP3

SUSE Linux Enterprise Micro: 5.1

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

ctdb: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

apparmor-utils-lang: before 2.13.6-150300.3.11.2

apparmor-utils: before 2.13.6-150300.3.11.2

apparmor-profiles: before 2.13.6-150300.3.11.2

apparmor-parser-lang: before 2.13.6-150300.3.11.2

apparmor-docs: before 2.13.6-150300.3.11.2

apparmor-abstractions: before 2.13.6-150300.3.11.2

samba-winbind-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

pam_apparmor-32bit-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor-32bit: before 2.13.6-150300.3.11.2

libtevent0-32bit-debuginfo: before 0.11.0-150300.3.3.2

libtevent0-32bit: before 0.11.0-150300.3.3.2

libtdb1-32bit-debuginfo: before 1.4.4-150300.3.3.2

libtdb1-32bit: before 1.4.4-150300.3.3.2

libtalloc2-32bit-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2-32bit: before 2.3.3-150300.3.3.2

libldb2-32bit-debuginfo: before 2.4.1-150300.3.10.1

libldb2-32bit: before 2.4.1-150300.3.10.1

libapparmor1-32bit-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1-32bit: before 2.13.6-150300.3.11.1

krb5-32bit-debuginfo: before 1.19.2-150300.8.3.2

krb5-32bit: before 1.19.2-150300.8.3.2

samba-ceph-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ceph: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

tevent-man: before 0.11.0-150300.3.3.1

tevent-debugsource: before 0.11.0-150300.3.3.2

tdb-tools-debuginfo: before 1.4.4-150300.3.3.2

tdb-tools: before 1.4.4-150300.3.3.2

tdb-debugsource: before 1.4.4-150300.3.3.2

talloc-man: before 2.3.3-150300.3.3.1

talloc-debugsource: before 2.3.3-150300.3.3.2

sssd-winbind-idmap-debuginfo: before 1.16.1-150300.23.17.3

sssd-winbind-idmap: before 1.16.1-150300.23.17.3

sssd-tools-debuginfo: before 1.16.1-150300.23.17.3

sssd-tools: before 1.16.1-150300.23.17.3

sssd-proxy-debuginfo: before 1.16.1-150300.23.17.3

sssd-proxy: before 1.16.1-150300.23.17.3

sssd-ldap-debuginfo: before 1.16.1-150300.23.17.3

sssd-ldap: before 1.16.1-150300.23.17.3

sssd-krb5-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common: before 1.16.1-150300.23.17.3

sssd-krb5: before 1.16.1-150300.23.17.3

sssd-ipa-debuginfo: before 1.16.1-150300.23.17.3

sssd-ipa: before 1.16.1-150300.23.17.3

sssd-debugsource: before 1.16.1-150300.23.17.3

sssd-dbus-debuginfo: before 1.16.1-150300.23.17.3

sssd-dbus: before 1.16.1-150300.23.17.3

sssd-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-common: before 1.16.1-150300.23.17.3

sssd-ad-debuginfo: before 1.16.1-150300.23.17.3

sssd-ad: before 1.16.1-150300.23.17.3

sssd: before 1.16.1-150300.23.17.3

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-tool: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-gpupdate: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

python3-tevent-debuginfo: before 0.11.0-150300.3.3.2

python3-tevent: before 0.11.0-150300.3.3.2

python3-tdb-debuginfo: before 1.4.4-150300.3.3.2

python3-tdb: before 1.4.4-150300.3.3.2

python3-talloc-devel: before 2.3.3-150300.3.3.2

python3-talloc-debuginfo: before 2.3.3-150300.3.3.2

python3-talloc: before 2.3.3-150300.3.3.2

python3-sssd-config-debuginfo: before 1.16.1-150300.23.17.3

python3-sssd-config: before 1.16.1-150300.23.17.3

python3-ldb-devel: before 2.4.1-150300.3.10.1

python3-ldb-debuginfo: before 2.4.1-150300.3.10.1

python3-ldb: before 2.4.1-150300.3.10.1

python3-apparmor-debuginfo: before 2.13.6-150300.3.11.2

python3-apparmor: before 2.13.6-150300.3.11.2

perl-apparmor-debuginfo: before 2.13.6-150300.3.11.2

perl-apparmor: before 2.13.6-150300.3.11.2

pam_apparmor-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor: before 2.13.6-150300.3.11.2

libtevent0-debuginfo: before 0.11.0-150300.3.3.2

libtevent0: before 0.11.0-150300.3.3.2

libtevent-devel: before 0.11.0-150300.3.3.2

libtdb1-debuginfo: before 1.4.4-150300.3.3.2

libtdb1: before 1.4.4-150300.3.3.2

libtdb-devel: before 1.4.4-150300.3.3.2

libtalloc2-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2: before 2.3.3-150300.3.3.2

libtalloc-devel: before 2.3.3-150300.3.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-150300.23.17.3

libsss_simpleifp0: before 1.16.1-150300.23.17.3

libsss_simpleifp-devel: before 1.16.1-150300.23.17.3

libsss_nss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_nss_idmap0: before 1.16.1-150300.23.17.3

libsss_nss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_idmap0: before 1.16.1-150300.23.17.3

libsss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_certmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_certmap0: before 1.16.1-150300.23.17.3

libsss_certmap-devel: before 1.16.1-150300.23.17.3

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libldb2-debuginfo: before 2.4.1-150300.3.10.1

libldb2: before 2.4.1-150300.3.10.1

libldb-devel: before 2.4.1-150300.3.10.1

libipa_hbac0-debuginfo: before 1.16.1-150300.23.17.3

libipa_hbac0: before 1.16.1-150300.23.17.3

libipa_hbac-devel: before 1.16.1-150300.23.17.3

libapparmor1-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1: before 2.13.6-150300.3.11.1

libapparmor-devel: before 2.13.6-150300.3.11.1

libapparmor-debugsource: before 2.13.6-150300.3.11.1

ldb-tools-debuginfo: before 2.4.1-150300.3.10.1

ldb-tools: before 2.4.1-150300.3.10.1

ldb-debugsource: before 2.4.1-150300.3.10.1

krb5-plugin-preauth-spake-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-spake: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp: before 1.19.2-150300.8.3.2

krb5-devel: before 1.19.2-150300.8.3.2

krb5-client-debuginfo: before 1.19.2-150300.8.3.2

krb5-client: before 1.19.2-150300.8.3.2

krb5: before 1.19.2-150300.8.3.2

apparmor-parser-debuginfo: before 2.13.6-150300.3.11.2

apparmor-parser: before 2.13.6-150300.3.11.2

samba-debugsource: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

krb5-server-debuginfo: before 1.19.2-150300.8.3.2

krb5-server: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap: before 1.19.2-150300.8.3.2

krb5-debugsource: before 1.19.2-150300.8.3.2

krb5-debuginfo: before 1.19.2-150300.8.3.2

apparmor-debugsource: before 2.13.6-150300.3.11.2

apache2-mod_apparmor-debuginfo: before 2.13.6-150300.3.11.2

apache2-mod_apparmor: before 2.13.6-150300.3.11.2

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_module_for_python2:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_server_applications:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-abstractions:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-gpupdate:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220283-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Link following

EUVDB-ID: #VU59345

Risk: Low

CVSSv4.0: 0.5 [CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-43566

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Exploit availability: No

Description

The vulnerability allows a remote user to bypass implemented security restrictions.

The vulnerability exists due to a symlink race condition when creating directories. A remote authenticated user can use SMB1 or NFS symlink race to create directories on the Unix filesystem outside of the share definition.

Successful exploitation of the vulnerability requites that the user has permissions to create folder in the target directory.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Python2: 15-SP3

SUSE Linux Enterprise High Availability: 15-SP3

SUSE Linux Enterprise Micro: 5.1

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

ctdb: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

apparmor-utils-lang: before 2.13.6-150300.3.11.2

apparmor-utils: before 2.13.6-150300.3.11.2

apparmor-profiles: before 2.13.6-150300.3.11.2

apparmor-parser-lang: before 2.13.6-150300.3.11.2

apparmor-docs: before 2.13.6-150300.3.11.2

apparmor-abstractions: before 2.13.6-150300.3.11.2

samba-winbind-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

pam_apparmor-32bit-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor-32bit: before 2.13.6-150300.3.11.2

libtevent0-32bit-debuginfo: before 0.11.0-150300.3.3.2

libtevent0-32bit: before 0.11.0-150300.3.3.2

libtdb1-32bit-debuginfo: before 1.4.4-150300.3.3.2

libtdb1-32bit: before 1.4.4-150300.3.3.2

libtalloc2-32bit-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2-32bit: before 2.3.3-150300.3.3.2

libldb2-32bit-debuginfo: before 2.4.1-150300.3.10.1

libldb2-32bit: before 2.4.1-150300.3.10.1

libapparmor1-32bit-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1-32bit: before 2.13.6-150300.3.11.1

krb5-32bit-debuginfo: before 1.19.2-150300.8.3.2

krb5-32bit: before 1.19.2-150300.8.3.2

samba-ceph-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ceph: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

tevent-man: before 0.11.0-150300.3.3.1

tevent-debugsource: before 0.11.0-150300.3.3.2

tdb-tools-debuginfo: before 1.4.4-150300.3.3.2

tdb-tools: before 1.4.4-150300.3.3.2

tdb-debugsource: before 1.4.4-150300.3.3.2

talloc-man: before 2.3.3-150300.3.3.1

talloc-debugsource: before 2.3.3-150300.3.3.2

sssd-winbind-idmap-debuginfo: before 1.16.1-150300.23.17.3

sssd-winbind-idmap: before 1.16.1-150300.23.17.3

sssd-tools-debuginfo: before 1.16.1-150300.23.17.3

sssd-tools: before 1.16.1-150300.23.17.3

sssd-proxy-debuginfo: before 1.16.1-150300.23.17.3

sssd-proxy: before 1.16.1-150300.23.17.3

sssd-ldap-debuginfo: before 1.16.1-150300.23.17.3

sssd-ldap: before 1.16.1-150300.23.17.3

sssd-krb5-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common: before 1.16.1-150300.23.17.3

sssd-krb5: before 1.16.1-150300.23.17.3

sssd-ipa-debuginfo: before 1.16.1-150300.23.17.3

sssd-ipa: before 1.16.1-150300.23.17.3

sssd-debugsource: before 1.16.1-150300.23.17.3

sssd-dbus-debuginfo: before 1.16.1-150300.23.17.3

sssd-dbus: before 1.16.1-150300.23.17.3

sssd-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-common: before 1.16.1-150300.23.17.3

sssd-ad-debuginfo: before 1.16.1-150300.23.17.3

sssd-ad: before 1.16.1-150300.23.17.3

sssd: before 1.16.1-150300.23.17.3

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-tool: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-gpupdate: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

python3-tevent-debuginfo: before 0.11.0-150300.3.3.2

python3-tevent: before 0.11.0-150300.3.3.2

python3-tdb-debuginfo: before 1.4.4-150300.3.3.2

python3-tdb: before 1.4.4-150300.3.3.2

python3-talloc-devel: before 2.3.3-150300.3.3.2

python3-talloc-debuginfo: before 2.3.3-150300.3.3.2

python3-talloc: before 2.3.3-150300.3.3.2

python3-sssd-config-debuginfo: before 1.16.1-150300.23.17.3

python3-sssd-config: before 1.16.1-150300.23.17.3

python3-ldb-devel: before 2.4.1-150300.3.10.1

python3-ldb-debuginfo: before 2.4.1-150300.3.10.1

python3-ldb: before 2.4.1-150300.3.10.1

python3-apparmor-debuginfo: before 2.13.6-150300.3.11.2

python3-apparmor: before 2.13.6-150300.3.11.2

perl-apparmor-debuginfo: before 2.13.6-150300.3.11.2

perl-apparmor: before 2.13.6-150300.3.11.2

pam_apparmor-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor: before 2.13.6-150300.3.11.2

libtevent0-debuginfo: before 0.11.0-150300.3.3.2

libtevent0: before 0.11.0-150300.3.3.2

libtevent-devel: before 0.11.0-150300.3.3.2

libtdb1-debuginfo: before 1.4.4-150300.3.3.2

libtdb1: before 1.4.4-150300.3.3.2

libtdb-devel: before 1.4.4-150300.3.3.2

libtalloc2-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2: before 2.3.3-150300.3.3.2

libtalloc-devel: before 2.3.3-150300.3.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-150300.23.17.3

libsss_simpleifp0: before 1.16.1-150300.23.17.3

libsss_simpleifp-devel: before 1.16.1-150300.23.17.3

libsss_nss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_nss_idmap0: before 1.16.1-150300.23.17.3

libsss_nss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_idmap0: before 1.16.1-150300.23.17.3

libsss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_certmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_certmap0: before 1.16.1-150300.23.17.3

libsss_certmap-devel: before 1.16.1-150300.23.17.3

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libldb2-debuginfo: before 2.4.1-150300.3.10.1

libldb2: before 2.4.1-150300.3.10.1

libldb-devel: before 2.4.1-150300.3.10.1

libipa_hbac0-debuginfo: before 1.16.1-150300.23.17.3

libipa_hbac0: before 1.16.1-150300.23.17.3

libipa_hbac-devel: before 1.16.1-150300.23.17.3

libapparmor1-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1: before 2.13.6-150300.3.11.1

libapparmor-devel: before 2.13.6-150300.3.11.1

libapparmor-debugsource: before 2.13.6-150300.3.11.1

ldb-tools-debuginfo: before 2.4.1-150300.3.10.1

ldb-tools: before 2.4.1-150300.3.10.1

ldb-debugsource: before 2.4.1-150300.3.10.1

krb5-plugin-preauth-spake-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-spake: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp: before 1.19.2-150300.8.3.2

krb5-devel: before 1.19.2-150300.8.3.2

krb5-client-debuginfo: before 1.19.2-150300.8.3.2

krb5-client: before 1.19.2-150300.8.3.2

krb5: before 1.19.2-150300.8.3.2

apparmor-parser-debuginfo: before 2.13.6-150300.3.11.2

apparmor-parser: before 2.13.6-150300.3.11.2

samba-debugsource: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

krb5-server-debuginfo: before 1.19.2-150300.8.3.2

krb5-server: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap: before 1.19.2-150300.8.3.2

krb5-debugsource: before 1.19.2-150300.8.3.2

krb5-debuginfo: before 1.19.2-150300.8.3.2

apparmor-debugsource: before 2.13.6-150300.3.11.2

apache2-mod_apparmor-debuginfo: before 2.13.6-150300.3.11.2

apache2-mod_apparmor: before 2.13.6-150300.3.11.2

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_module_for_python2:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_server_applications:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-abstractions:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-gpupdate:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220283-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Link following

EUVDB-ID: #VU60187

Risk: Low

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-44141

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Exploit availability: No

Description

The vulnerability allows a remote user to gain access to sensitive information.

The vulnerability exists due to insecure link following. A remote user with ability to write files to the exported part of the file system under a share via SMB1 unix extensions or via NFS can create a symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Python2: 15-SP3

SUSE Linux Enterprise High Availability: 15-SP3

SUSE Linux Enterprise Micro: 5.1

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

ctdb: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

apparmor-utils-lang: before 2.13.6-150300.3.11.2

apparmor-utils: before 2.13.6-150300.3.11.2

apparmor-profiles: before 2.13.6-150300.3.11.2

apparmor-parser-lang: before 2.13.6-150300.3.11.2

apparmor-docs: before 2.13.6-150300.3.11.2

apparmor-abstractions: before 2.13.6-150300.3.11.2

samba-winbind-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

pam_apparmor-32bit-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor-32bit: before 2.13.6-150300.3.11.2

libtevent0-32bit-debuginfo: before 0.11.0-150300.3.3.2

libtevent0-32bit: before 0.11.0-150300.3.3.2

libtdb1-32bit-debuginfo: before 1.4.4-150300.3.3.2

libtdb1-32bit: before 1.4.4-150300.3.3.2

libtalloc2-32bit-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2-32bit: before 2.3.3-150300.3.3.2

libldb2-32bit-debuginfo: before 2.4.1-150300.3.10.1

libldb2-32bit: before 2.4.1-150300.3.10.1

libapparmor1-32bit-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1-32bit: before 2.13.6-150300.3.11.1

krb5-32bit-debuginfo: before 1.19.2-150300.8.3.2

krb5-32bit: before 1.19.2-150300.8.3.2

samba-ceph-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ceph: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

tevent-man: before 0.11.0-150300.3.3.1

tevent-debugsource: before 0.11.0-150300.3.3.2

tdb-tools-debuginfo: before 1.4.4-150300.3.3.2

tdb-tools: before 1.4.4-150300.3.3.2

tdb-debugsource: before 1.4.4-150300.3.3.2

talloc-man: before 2.3.3-150300.3.3.1

talloc-debugsource: before 2.3.3-150300.3.3.2

sssd-winbind-idmap-debuginfo: before 1.16.1-150300.23.17.3

sssd-winbind-idmap: before 1.16.1-150300.23.17.3

sssd-tools-debuginfo: before 1.16.1-150300.23.17.3

sssd-tools: before 1.16.1-150300.23.17.3

sssd-proxy-debuginfo: before 1.16.1-150300.23.17.3

sssd-proxy: before 1.16.1-150300.23.17.3

sssd-ldap-debuginfo: before 1.16.1-150300.23.17.3

sssd-ldap: before 1.16.1-150300.23.17.3

sssd-krb5-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common: before 1.16.1-150300.23.17.3

sssd-krb5: before 1.16.1-150300.23.17.3

sssd-ipa-debuginfo: before 1.16.1-150300.23.17.3

sssd-ipa: before 1.16.1-150300.23.17.3

sssd-debugsource: before 1.16.1-150300.23.17.3

sssd-dbus-debuginfo: before 1.16.1-150300.23.17.3

sssd-dbus: before 1.16.1-150300.23.17.3

sssd-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-common: before 1.16.1-150300.23.17.3

sssd-ad-debuginfo: before 1.16.1-150300.23.17.3

sssd-ad: before 1.16.1-150300.23.17.3

sssd: before 1.16.1-150300.23.17.3

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-tool: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-gpupdate: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

python3-tevent-debuginfo: before 0.11.0-150300.3.3.2

python3-tevent: before 0.11.0-150300.3.3.2

python3-tdb-debuginfo: before 1.4.4-150300.3.3.2

python3-tdb: before 1.4.4-150300.3.3.2

python3-talloc-devel: before 2.3.3-150300.3.3.2

python3-talloc-debuginfo: before 2.3.3-150300.3.3.2

python3-talloc: before 2.3.3-150300.3.3.2

python3-sssd-config-debuginfo: before 1.16.1-150300.23.17.3

python3-sssd-config: before 1.16.1-150300.23.17.3

python3-ldb-devel: before 2.4.1-150300.3.10.1

python3-ldb-debuginfo: before 2.4.1-150300.3.10.1

python3-ldb: before 2.4.1-150300.3.10.1

python3-apparmor-debuginfo: before 2.13.6-150300.3.11.2

python3-apparmor: before 2.13.6-150300.3.11.2

perl-apparmor-debuginfo: before 2.13.6-150300.3.11.2

perl-apparmor: before 2.13.6-150300.3.11.2

pam_apparmor-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor: before 2.13.6-150300.3.11.2

libtevent0-debuginfo: before 0.11.0-150300.3.3.2

libtevent0: before 0.11.0-150300.3.3.2

libtevent-devel: before 0.11.0-150300.3.3.2

libtdb1-debuginfo: before 1.4.4-150300.3.3.2

libtdb1: before 1.4.4-150300.3.3.2

libtdb-devel: before 1.4.4-150300.3.3.2

libtalloc2-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2: before 2.3.3-150300.3.3.2

libtalloc-devel: before 2.3.3-150300.3.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-150300.23.17.3

libsss_simpleifp0: before 1.16.1-150300.23.17.3

libsss_simpleifp-devel: before 1.16.1-150300.23.17.3

libsss_nss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_nss_idmap0: before 1.16.1-150300.23.17.3

libsss_nss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_idmap0: before 1.16.1-150300.23.17.3

libsss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_certmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_certmap0: before 1.16.1-150300.23.17.3

libsss_certmap-devel: before 1.16.1-150300.23.17.3

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libldb2-debuginfo: before 2.4.1-150300.3.10.1

libldb2: before 2.4.1-150300.3.10.1

libldb-devel: before 2.4.1-150300.3.10.1

libipa_hbac0-debuginfo: before 1.16.1-150300.23.17.3

libipa_hbac0: before 1.16.1-150300.23.17.3

libipa_hbac-devel: before 1.16.1-150300.23.17.3

libapparmor1-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1: before 2.13.6-150300.3.11.1

libapparmor-devel: before 2.13.6-150300.3.11.1

libapparmor-debugsource: before 2.13.6-150300.3.11.1

ldb-tools-debuginfo: before 2.4.1-150300.3.10.1

ldb-tools: before 2.4.1-150300.3.10.1

ldb-debugsource: before 2.4.1-150300.3.10.1

krb5-plugin-preauth-spake-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-spake: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp: before 1.19.2-150300.8.3.2

krb5-devel: before 1.19.2-150300.8.3.2

krb5-client-debuginfo: before 1.19.2-150300.8.3.2

krb5-client: before 1.19.2-150300.8.3.2

krb5: before 1.19.2-150300.8.3.2

apparmor-parser-debuginfo: before 2.13.6-150300.3.11.2

apparmor-parser: before 2.13.6-150300.3.11.2

samba-debugsource: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

krb5-server-debuginfo: before 1.19.2-150300.8.3.2

krb5-server: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap: before 1.19.2-150300.8.3.2

krb5-debugsource: before 1.19.2-150300.8.3.2

krb5-debuginfo: before 1.19.2-150300.8.3.2

apparmor-debugsource: before 2.13.6-150300.3.11.2

apache2-mod_apparmor-debuginfo: before 2.13.6-150300.3.11.2

apache2-mod_apparmor: before 2.13.6-150300.3.11.2

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_module_for_python2:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_server_applications:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-abstractions:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-gpupdate:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220283-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Out-of-bounds write

EUVDB-ID: #VU60186

Risk: High

CVSSv4.0: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/U:Amber]

CVE-ID: CVE-2021-44142

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing EA metadata while opening files in smbd within the VFS Samba module (vfs_fruit). A remote attacker with ability to write to file's extended attributes can trigger an out-of-bounds write and execute arbitrary code with root privileges.

Note, the vulnerability in vfs_fruit exists in the default configuration of the fruit VFS module using fruit:metadata=netatalk or fruit:resource=file.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Python2: 15-SP3

SUSE Linux Enterprise High Availability: 15-SP3

SUSE Linux Enterprise Micro: 5.1

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

ctdb: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

apparmor-utils-lang: before 2.13.6-150300.3.11.2

apparmor-utils: before 2.13.6-150300.3.11.2

apparmor-profiles: before 2.13.6-150300.3.11.2

apparmor-parser-lang: before 2.13.6-150300.3.11.2

apparmor-docs: before 2.13.6-150300.3.11.2

apparmor-abstractions: before 2.13.6-150300.3.11.2

samba-winbind-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

pam_apparmor-32bit-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor-32bit: before 2.13.6-150300.3.11.2

libtevent0-32bit-debuginfo: before 0.11.0-150300.3.3.2

libtevent0-32bit: before 0.11.0-150300.3.3.2

libtdb1-32bit-debuginfo: before 1.4.4-150300.3.3.2

libtdb1-32bit: before 1.4.4-150300.3.3.2

libtalloc2-32bit-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2-32bit: before 2.3.3-150300.3.3.2

libldb2-32bit-debuginfo: before 2.4.1-150300.3.10.1

libldb2-32bit: before 2.4.1-150300.3.10.1

libapparmor1-32bit-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1-32bit: before 2.13.6-150300.3.11.1

krb5-32bit-debuginfo: before 1.19.2-150300.8.3.2

krb5-32bit: before 1.19.2-150300.8.3.2

samba-ceph-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ceph: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

tevent-man: before 0.11.0-150300.3.3.1

tevent-debugsource: before 0.11.0-150300.3.3.2

tdb-tools-debuginfo: before 1.4.4-150300.3.3.2

tdb-tools: before 1.4.4-150300.3.3.2

tdb-debugsource: before 1.4.4-150300.3.3.2

talloc-man: before 2.3.3-150300.3.3.1

talloc-debugsource: before 2.3.3-150300.3.3.2

sssd-winbind-idmap-debuginfo: before 1.16.1-150300.23.17.3

sssd-winbind-idmap: before 1.16.1-150300.23.17.3

sssd-tools-debuginfo: before 1.16.1-150300.23.17.3

sssd-tools: before 1.16.1-150300.23.17.3

sssd-proxy-debuginfo: before 1.16.1-150300.23.17.3

sssd-proxy: before 1.16.1-150300.23.17.3

sssd-ldap-debuginfo: before 1.16.1-150300.23.17.3

sssd-ldap: before 1.16.1-150300.23.17.3

sssd-krb5-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common: before 1.16.1-150300.23.17.3

sssd-krb5: before 1.16.1-150300.23.17.3

sssd-ipa-debuginfo: before 1.16.1-150300.23.17.3

sssd-ipa: before 1.16.1-150300.23.17.3

sssd-debugsource: before 1.16.1-150300.23.17.3

sssd-dbus-debuginfo: before 1.16.1-150300.23.17.3

sssd-dbus: before 1.16.1-150300.23.17.3

sssd-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-common: before 1.16.1-150300.23.17.3

sssd-ad-debuginfo: before 1.16.1-150300.23.17.3

sssd-ad: before 1.16.1-150300.23.17.3

sssd: before 1.16.1-150300.23.17.3

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-tool: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-gpupdate: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

python3-tevent-debuginfo: before 0.11.0-150300.3.3.2

python3-tevent: before 0.11.0-150300.3.3.2

python3-tdb-debuginfo: before 1.4.4-150300.3.3.2

python3-tdb: before 1.4.4-150300.3.3.2

python3-talloc-devel: before 2.3.3-150300.3.3.2

python3-talloc-debuginfo: before 2.3.3-150300.3.3.2

python3-talloc: before 2.3.3-150300.3.3.2

python3-sssd-config-debuginfo: before 1.16.1-150300.23.17.3

python3-sssd-config: before 1.16.1-150300.23.17.3

python3-ldb-devel: before 2.4.1-150300.3.10.1

python3-ldb-debuginfo: before 2.4.1-150300.3.10.1

python3-ldb: before 2.4.1-150300.3.10.1

python3-apparmor-debuginfo: before 2.13.6-150300.3.11.2

python3-apparmor: before 2.13.6-150300.3.11.2

perl-apparmor-debuginfo: before 2.13.6-150300.3.11.2

perl-apparmor: before 2.13.6-150300.3.11.2

pam_apparmor-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor: before 2.13.6-150300.3.11.2

libtevent0-debuginfo: before 0.11.0-150300.3.3.2

libtevent0: before 0.11.0-150300.3.3.2

libtevent-devel: before 0.11.0-150300.3.3.2

libtdb1-debuginfo: before 1.4.4-150300.3.3.2

libtdb1: before 1.4.4-150300.3.3.2

libtdb-devel: before 1.4.4-150300.3.3.2

libtalloc2-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2: before 2.3.3-150300.3.3.2

libtalloc-devel: before 2.3.3-150300.3.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-150300.23.17.3

libsss_simpleifp0: before 1.16.1-150300.23.17.3

libsss_simpleifp-devel: before 1.16.1-150300.23.17.3

libsss_nss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_nss_idmap0: before 1.16.1-150300.23.17.3

libsss_nss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_idmap0: before 1.16.1-150300.23.17.3

libsss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_certmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_certmap0: before 1.16.1-150300.23.17.3

libsss_certmap-devel: before 1.16.1-150300.23.17.3

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libldb2-debuginfo: before 2.4.1-150300.3.10.1

libldb2: before 2.4.1-150300.3.10.1

libldb-devel: before 2.4.1-150300.3.10.1

libipa_hbac0-debuginfo: before 1.16.1-150300.23.17.3

libipa_hbac0: before 1.16.1-150300.23.17.3

libipa_hbac-devel: before 1.16.1-150300.23.17.3

libapparmor1-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1: before 2.13.6-150300.3.11.1

libapparmor-devel: before 2.13.6-150300.3.11.1

libapparmor-debugsource: before 2.13.6-150300.3.11.1

ldb-tools-debuginfo: before 2.4.1-150300.3.10.1

ldb-tools: before 2.4.1-150300.3.10.1

ldb-debugsource: before 2.4.1-150300.3.10.1

krb5-plugin-preauth-spake-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-spake: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp: before 1.19.2-150300.8.3.2

krb5-devel: before 1.19.2-150300.8.3.2

krb5-client-debuginfo: before 1.19.2-150300.8.3.2

krb5-client: before 1.19.2-150300.8.3.2

krb5: before 1.19.2-150300.8.3.2

apparmor-parser-debuginfo: before 2.13.6-150300.3.11.2

apparmor-parser: before 2.13.6-150300.3.11.2

samba-debugsource: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

krb5-server-debuginfo: before 1.19.2-150300.8.3.2

krb5-server: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap: before 1.19.2-150300.8.3.2

krb5-debugsource: before 1.19.2-150300.8.3.2

krb5-debuginfo: before 1.19.2-150300.8.3.2

apparmor-debugsource: before 2.13.6-150300.3.11.2

apache2-mod_apparmor-debuginfo: before 2.13.6-150300.3.11.2

apache2-mod_apparmor: before 2.13.6-150300.3.11.2

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_module_for_python2:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_server_applications:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-abstractions:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-gpupdate:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220283-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

8) Insufficient verification of data authenticity

EUVDB-ID: #VU60185

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-0336

CWE-ID: CWE-345 - Insufficient Verification of Data Authenticity

Exploit availability: No

Description

The vulnerability allows a local user to impersonate arbitrary services.

The vulnerability exists due to Samba AD DC relies only on SPN (service principals name) to identify services on the network. An attacker with ability to modify SPNs can bypass implemented protection and cause a denial of service condition by adding an SPN that matches an existing service or impersonate services on the network.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Python2: 15-SP3

SUSE Linux Enterprise High Availability: 15-SP3

SUSE Linux Enterprise Micro: 5.1

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

ctdb: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

apparmor-utils-lang: before 2.13.6-150300.3.11.2

apparmor-utils: before 2.13.6-150300.3.11.2

apparmor-profiles: before 2.13.6-150300.3.11.2

apparmor-parser-lang: before 2.13.6-150300.3.11.2

apparmor-docs: before 2.13.6-150300.3.11.2

apparmor-abstractions: before 2.13.6-150300.3.11.2

samba-winbind-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-32bit: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

pam_apparmor-32bit-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor-32bit: before 2.13.6-150300.3.11.2

libtevent0-32bit-debuginfo: before 0.11.0-150300.3.3.2

libtevent0-32bit: before 0.11.0-150300.3.3.2

libtdb1-32bit-debuginfo: before 1.4.4-150300.3.3.2

libtdb1-32bit: before 1.4.4-150300.3.3.2

libtalloc2-32bit-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2-32bit: before 2.3.3-150300.3.3.2

libldb2-32bit-debuginfo: before 2.4.1-150300.3.10.1

libldb2-32bit: before 2.4.1-150300.3.10.1

libapparmor1-32bit-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1-32bit: before 2.13.6-150300.3.11.1

krb5-32bit-debuginfo: before 1.19.2-150300.8.3.2

krb5-32bit: before 1.19.2-150300.8.3.2

samba-ceph-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ceph: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

tevent-man: before 0.11.0-150300.3.3.1

tevent-debugsource: before 0.11.0-150300.3.3.2

tdb-tools-debuginfo: before 1.4.4-150300.3.3.2

tdb-tools: before 1.4.4-150300.3.3.2

tdb-debugsource: before 1.4.4-150300.3.3.2

talloc-man: before 2.3.3-150300.3.3.1

talloc-debugsource: before 2.3.3-150300.3.3.2

sssd-winbind-idmap-debuginfo: before 1.16.1-150300.23.17.3

sssd-winbind-idmap: before 1.16.1-150300.23.17.3

sssd-tools-debuginfo: before 1.16.1-150300.23.17.3

sssd-tools: before 1.16.1-150300.23.17.3

sssd-proxy-debuginfo: before 1.16.1-150300.23.17.3

sssd-proxy: before 1.16.1-150300.23.17.3

sssd-ldap-debuginfo: before 1.16.1-150300.23.17.3

sssd-ldap: before 1.16.1-150300.23.17.3

sssd-krb5-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-krb5-common: before 1.16.1-150300.23.17.3

sssd-krb5: before 1.16.1-150300.23.17.3

sssd-ipa-debuginfo: before 1.16.1-150300.23.17.3

sssd-ipa: before 1.16.1-150300.23.17.3

sssd-debugsource: before 1.16.1-150300.23.17.3

sssd-dbus-debuginfo: before 1.16.1-150300.23.17.3

sssd-dbus: before 1.16.1-150300.23.17.3

sssd-common-debuginfo: before 1.16.1-150300.23.17.3

sssd-common: before 1.16.1-150300.23.17.3

sssd-ad-debuginfo: before 1.16.1-150300.23.17.3

sssd-ad: before 1.16.1-150300.23.17.3

sssd: before 1.16.1-150300.23.17.3

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-winbind: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-tool: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-gpupdate: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-dsdb-modules: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-client: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-libs: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

python3-tevent-debuginfo: before 0.11.0-150300.3.3.2

python3-tevent: before 0.11.0-150300.3.3.2

python3-tdb-debuginfo: before 1.4.4-150300.3.3.2

python3-tdb: before 1.4.4-150300.3.3.2

python3-talloc-devel: before 2.3.3-150300.3.3.2

python3-talloc-debuginfo: before 2.3.3-150300.3.3.2

python3-talloc: before 2.3.3-150300.3.3.2

python3-sssd-config-debuginfo: before 1.16.1-150300.23.17.3

python3-sssd-config: before 1.16.1-150300.23.17.3

python3-ldb-devel: before 2.4.1-150300.3.10.1

python3-ldb-debuginfo: before 2.4.1-150300.3.10.1

python3-ldb: before 2.4.1-150300.3.10.1

python3-apparmor-debuginfo: before 2.13.6-150300.3.11.2

python3-apparmor: before 2.13.6-150300.3.11.2

perl-apparmor-debuginfo: before 2.13.6-150300.3.11.2

perl-apparmor: before 2.13.6-150300.3.11.2

pam_apparmor-debuginfo: before 2.13.6-150300.3.11.2

pam_apparmor: before 2.13.6-150300.3.11.2

libtevent0-debuginfo: before 0.11.0-150300.3.3.2

libtevent0: before 0.11.0-150300.3.3.2

libtevent-devel: before 0.11.0-150300.3.3.2

libtdb1-debuginfo: before 1.4.4-150300.3.3.2

libtdb1: before 1.4.4-150300.3.3.2

libtdb-devel: before 1.4.4-150300.3.3.2

libtalloc2-debuginfo: before 2.3.3-150300.3.3.2

libtalloc2: before 2.3.3-150300.3.3.2

libtalloc-devel: before 2.3.3-150300.3.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-150300.23.17.3

libsss_simpleifp0: before 1.16.1-150300.23.17.3

libsss_simpleifp-devel: before 1.16.1-150300.23.17.3

libsss_nss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_nss_idmap0: before 1.16.1-150300.23.17.3

libsss_nss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_idmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_idmap0: before 1.16.1-150300.23.17.3

libsss_idmap-devel: before 1.16.1-150300.23.17.3

libsss_certmap0-debuginfo: before 1.16.1-150300.23.17.3

libsss_certmap0: before 1.16.1-150300.23.17.3

libsss_certmap-devel: before 1.16.1-150300.23.17.3

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

libldb2-debuginfo: before 2.4.1-150300.3.10.1

libldb2: before 2.4.1-150300.3.10.1

libldb-devel: before 2.4.1-150300.3.10.1

libipa_hbac0-debuginfo: before 1.16.1-150300.23.17.3

libipa_hbac0: before 1.16.1-150300.23.17.3

libipa_hbac-devel: before 1.16.1-150300.23.17.3

libapparmor1-debuginfo: before 2.13.6-150300.3.11.1

libapparmor1: before 2.13.6-150300.3.11.1

libapparmor-devel: before 2.13.6-150300.3.11.1

libapparmor-debugsource: before 2.13.6-150300.3.11.1

ldb-tools-debuginfo: before 2.4.1-150300.3.10.1

ldb-tools: before 2.4.1-150300.3.10.1

ldb-debugsource: before 2.4.1-150300.3.10.1

krb5-plugin-preauth-spake-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-spake: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-pkinit: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-preauth-otp: before 1.19.2-150300.8.3.2

krb5-devel: before 1.19.2-150300.8.3.2

krb5-client-debuginfo: before 1.19.2-150300.8.3.2

krb5-client: before 1.19.2-150300.8.3.2

krb5: before 1.19.2-150300.8.3.2

apparmor-parser-debuginfo: before 2.13.6-150300.3.11.2

apparmor-parser: before 2.13.6-150300.3.11.2

samba-debugsource: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc-debuginfo: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

samba-ad-dc: before 4.15.4+git.324.8332acf1a63-150300.3.25.3

krb5-server-debuginfo: before 1.19.2-150300.8.3.2

krb5-server: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap-debuginfo: before 1.19.2-150300.8.3.2

krb5-plugin-kdb-ldap: before 1.19.2-150300.8.3.2

krb5-debugsource: before 1.19.2-150300.8.3.2

krb5-debuginfo: before 1.19.2-150300.8.3.2

apparmor-debugsource: before 2.13.6-150300.3.11.2

apache2-mod_apparmor-debuginfo: before 2.13.6-150300.3.11.2

apache2-mod_apparmor: before 2.13.6-150300.3.11.2

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_module_for_python2:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_server_applications:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-lang:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-abstractions:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ceph:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tevent-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:tdb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-man:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:talloc-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-winbind-idmap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-gpupdate:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-dsdb-modules:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tevent:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-tdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-talloc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-ldb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python3-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtevent-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtdb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libtalloc-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libldb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ldb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-spake:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-pkinit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-preauth-otp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ad-dc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-server:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-plugin-kdb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220283-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.