tevent (SUSE:Linux Enterprise Module for Basesystem 15 SP3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Basesystem 15 SP3 package tevent, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (8)

• CVE-2022-0336 — CVSS 8.8 (high): The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those…
• CVE-2021-44142 — CVSS 8.8 (high): The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and…
• CVE-2021-36222 — CVSS 7.5 (high): ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2…
• CVE-2020-27840 — CVSS 7.5 (high): A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings…
• CVE-2021-20277 — CVSS 7.5 (high): A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write…
• CVE-2021-20316 — CVSS 6.8 (medium): A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or…
• CVE-2021-44141 — CVSS 4.3 (medium): All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory…
• CVE-2021-43566 — CVSS 2.5 (low): All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in…