ldb (SUSE:Linux Enterprise Module for Basesystem 15 SP2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Basesystem 15 SP2 package ldb, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (8)

• CVE-2020-14303 — CVSS 7.5 (high): A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an…
• CVE-2020-27840 — CVSS 7.5 (high): A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings…
• CVE-2020-10704 — CVSS 7.5 (high): A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active…
• CVE-2020-10745 — CVSS 7.5 (high): A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This…
• CVE-2021-20277 — CVSS 7.5 (high): A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write…
• CVE-2020-10760 — CVSS 6.5 (medium): A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC…
• CVE-2020-10730 — CVSS 6.5 (medium): A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11…
• CVE-2020-10700 — CVSS 5.3 (medium): A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A…