Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.OPENSUSE-2020-1313.NASL
HistorySep 02, 2020 - 12:00 a.m.

openSUSE Security Update : ldb / samba (openSUSE-2020-1313)

2020-09-0200:00:00
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
31

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

EPSS

0.028

Percentile

90.8%

JSON

This update for ldb, samba fixes the following issues :

Changes in samba :

  • Update to samba 4.11.11

  • CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159]

  • CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378);
    (bsc#1173160).

  • CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402);
    (bsc#1173161)

  • CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359).

  • Update to samba 4.11.10

  • Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374).

  • vfs_shadow_copy2 doesn’t fail case looking in snapdirseverywhere mode; (bso#14350)

  • ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).

  • Malicous SMB1 server can crash libsmbclient; (bso#14366)

  • winbindd: Fix a use-after-free when winbind clients exit; (bso#14382)

  • ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330)

  • Update to samba 4.11.9

  • nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).

  • ‘samba-tool group’ commands do not handle group names with special chars correctly; (bso#14296).

  • smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237).

  • Missing check for DMAPI offline status in async DOS attributes; (bso#14293).

  • smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307).

  • vfs_recycle: Prevent flooding the log if we’re called on non-existent paths; (bso#14316)

  • smbd mistakenly updates a file’s write-time on close;
    (bso#14320).

  • RPC handles cannot be differentiated in source3 RPC server; (bso#14359).

  • librpc: Fix IDL for svcctl_ChangeServiceConfigW;
    (bso#14313).

  • nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).

  • Fix fruit:time machine max size on arm; (bso#13622)

  • CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294).

  • ctdb: Fix a memleak; (bso#14348).

  • libsmb: Don’t try to find posix stat info in SMBC_getatr().

  • ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).

  • s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095)

  • s3:libads: Fix ads_get_upn(); (bso#14336).

  • CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294)

  • Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).

  • ctdb-recoverd: Avoid dereferencing NULL rec->nodemap;
    (bso#14324)

  • Update to samba 4.11.8

  • CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);

  • CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851);

  • Update to samba 4.11.7

  • s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239).

  • s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283)

  • dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).

  • ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270)

  • auth: Fix CIDs 1458418 and 1458420 NULL pointer dereferences; (bso#14247).

  • smbd: Handle EINTR from open(2) properly; (bso#14285)

  • winbind member (source3) fails local SAM auth with empty domain name; (bso#14247)

  • winbindd: Handling missing idmap in getgrgid();
    (bso#14265).

  • lib:util: Log mkdir error on correct debug levels;
    (bso#14253).

  • wafsamba: Do not use ‘rU’ as the ‘U’ is deprecated in Python 3.9; (bso#14266).

  • ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274).

  • Update to samba 4.11.6

  • pygpo: Use correct method flags; (bso#14209).

  • vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).

  • Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209).

  • source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218).

  • docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122).

  • smbd: Fix the build with clang; (bso#14251).

  • upgradedns: Ensure lmdb lock files linked; (bso#14199).

  • s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182).

  • smbc_stat() doesn’t return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101).

  • librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219).

  • ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).

  • Add libnetapi-devel to baselibs conf, for wine usage;
    (bsc#1172307);

  • Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);

  • Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);

Changes in ldb :

  • Update to version 2.0.12

  • CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159).

  • ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).

  • lib/ldb: add unit test for ldb_ldap internal code.

  • Update to version 2.0.11

  • lib ldb: lmdb init var before calling mdb_reader_check.

  • lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).

  • ldb tests: Confirm lmdb free list handling

This update was imported from the SUSE:SLE-15-SP2:Update update project.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2020-1313.
#
# The text description of this plugin is (C) SUSE LLC.
#

include('compat.inc');

if (description)
{
  script_id(140174);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/02/22");

  script_cve_id(
    "CVE-2020-10700",
    "CVE-2020-10704",
    "CVE-2020-10730",
    "CVE-2020-10745",
    "CVE-2020-10760",
    "CVE-2020-14303"
  );

  script_name(english:"openSUSE Security Update : ldb / samba (openSUSE-2020-1313)");

  script_set_attribute(attribute:"synopsis", value:
"The remote openSUSE host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"This update for ldb, samba fixes the following issues :

Changes in samba :

  - Update to samba 4.11.11

  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159]

  + CVE-2020-10745: invalid DNS or NBT queries containing
    dots use several seconds of CPU each; (bso#14378);
    (bsc#1173160).

  + CVE-2020-10760: Use-after-free in AD DC Global Catalog
    LDAP server with paged_result or VLV; (bso#14402);
    (bsc#1173161)

  + CVE-2020-14303: Endless loop from empty UDP packet sent
    to AD DC nbt_server; (bso#14417); (bsc#1173359).

  - Update to samba 4.11.10

  + Fix segfault when using SMBC_opendir_ctx() routine for
    share folder that contains incorrect symbols in any file
    name; (bso#14374).

  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)

  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).

  + Malicous SMB1 server can crash libsmbclient; (bso#14366)

  + winbindd: Fix a use-after-free when winbind clients
    exit; (bso#14382)

  + ldb: Bump version to 2.0.11, LMDB databases can grow
    without bounds. (bso#14330)

  - Update to samba 4.11.9

  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).

  + 'samba-tool group' commands do not handle group names
    with special chars correctly; (bso#14296).

  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).

  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).

  + smbd: Ignore set NTACL requests which contain S-1-5-88
    NFS ACEs; (bso#14307).

  + vfs_recycle: Prevent flooding the log if we're called on
    non-existent paths; (bso#14316)

  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).

  + RPC handles cannot be differentiated in source3 RPC
    server; (bso#14359).

  + librpc: Fix IDL for svcctl_ChangeServiceConfigW;
    (bso#14313).

  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).

  + Fix fruit:time machine max size on arm; (bso#13622)

  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).

  + ctdb: Fix a memleak; (bso#14348).

  + libsmb: Don't try to find posix stat info in
    SMBC_getatr().

  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).

  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)

  + s3:libads: Fix ads_get_upn(); (bso#14336).

  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)

  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).

  + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap;
    (bso#14324)

  - Update to samba 4.11.8

  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);

  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);

  - Update to samba 4.11.7

  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).

  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)

  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).

  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)

  + auth: Fix CIDs 1458418 and 1458420 NULL pointer
    dereferences; (bso#14247).

  + smbd: Handle EINTR from open(2) properly; (bso#14285)

  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)

  + winbindd: Handling missing idmap in getgrgid();
    (bso#14265).

  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).

  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).

  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).

  - Update to samba 4.11.6

  + pygpo: Use correct method flags; (bso#14209).

  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).

  + Avoiding bad call flags with python 3.8, using
    METH_NOARGS instead of zero; (bso#14209).

  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).

  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).

  + smbd: Fix the build with clang; (bso#14251).

  + upgradedns: Ensure lmdb lock files linked; (bso#14199).

  + s3: VFS: glusterfs: Reset nlinks for symlink entries
    during readdir; (bso#14182).

  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).

  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).

  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).

  - Add libnetapi-devel to baselibs conf, for wine usage;
    (bsc#1172307);

  - Installing: samba - samba-ad-dc.service does not exist
    and unit not found; (bsc#1171437);

  - Fix samba_winbind package is installing python3-base
    without python3 package; (bsc#1169521);

Changes in ldb :

  - Update to version 2.0.12

  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159).

  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).

  + lib/ldb: add unit test for ldb_ldap internal code.

  - Update to version 2.0.11

  + lib ldb: lmdb init var before calling mdb_reader_check.

  + lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).

  + ldb tests: Confirm lmdb free list handling

This update was imported from the SUSE:SLE-15-SP2:Update update
project.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1141320");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1162680");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1169095");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1169521");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1169850");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1169851");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1171437");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1172307");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1173159");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1173160");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1173161");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1173359");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1174120");
  script_set_attribute(attribute:"solution", value:
"Update the affected ldb / samba packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-10745");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2020-14303");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2020/05/04");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/09/01");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/09/02");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ctdb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ctdb-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ctdb-pcp-pmda");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ctdb-pcp-pmda-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ctdb-tests");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ctdb-tests-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ldb-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ldb-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ldb-tools-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-binding0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-binding0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-binding0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-binding0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-samr-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-samr0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-samr0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-samr0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-samr0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libldb-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libldb2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libldb2-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libldb2-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libldb2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-krb5pac-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-krb5pac0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-krb5pac0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-krb5pac0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-krb5pac0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-nbt-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-nbt0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-nbt0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-nbt0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-nbt0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-standard-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-standard0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-standard0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-standard0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-standard0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libnetapi-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libnetapi-devel-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libnetapi0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libnetapi0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libnetapi0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libnetapi0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-credentials-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-credentials0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-credentials0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-credentials0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-credentials0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-errors-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-errors0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-errors0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-errors0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-errors0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-hostconfig-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-hostconfig0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-hostconfig0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-hostconfig0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-hostconfig0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-passdb-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-passdb0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-passdb0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-passdb0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-passdb0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy-python3-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy0-python3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy0-python3-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy0-python3-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy0-python3-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-util-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-util0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-util0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-util0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-util0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamdb-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamdb0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamdb0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamdb0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamdb0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbclient-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbclient0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbclient0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbclient0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbclient0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbconf-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbconf0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbconf0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbconf0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbconf0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbldap-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbldap2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbldap2-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbldap2-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbldap2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtevent-util-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtevent-util0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtevent-util0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtevent-util0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtevent-util0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libwbclient-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libwbclient0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libwbclient0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libwbclient0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libwbclient0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-ldb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-ldb-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-ldb-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-ldb-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-ldb-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-ad-dc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-ad-dc-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-ad-dc-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-ad-dc-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-ceph");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-ceph-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-client");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-client-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-client-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-client-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-core-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-dsdb-modules");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-dsdb-modules-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-python3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-python3-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-python3-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-python3-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-python3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-python3-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-test-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-winbind");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-winbind-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-winbind-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-winbind-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:15.2");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE15\.2)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "15.2", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);

flag = 0;

if ( rpm_check(release:"SUSE15.2", reference:"ctdb-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"ctdb-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"ctdb-pcp-pmda-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"ctdb-pcp-pmda-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"ctdb-tests-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"ctdb-tests-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"ldb-debugsource-2.0.12-lp152.2.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"ldb-tools-2.0.12-lp152.2.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"ldb-tools-debuginfo-2.0.12-lp152.2.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libdcerpc-binding0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libdcerpc-binding0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libdcerpc-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libdcerpc-samr-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libdcerpc-samr0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libdcerpc-samr0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libdcerpc0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libdcerpc0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libldb-devel-2.0.12-lp152.2.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libldb2-2.0.12-lp152.2.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libldb2-debuginfo-2.0.12-lp152.2.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libndr-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libndr-krb5pac-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libndr-krb5pac0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libndr-krb5pac0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libndr-nbt-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libndr-nbt0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libndr-nbt0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libndr-standard-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libndr-standard0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libndr-standard0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libndr0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libndr0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libnetapi-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libnetapi0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libnetapi0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-credentials-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-credentials0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-credentials0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-errors-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-errors0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-errors0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-hostconfig-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-hostconfig0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-hostconfig0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-passdb-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-passdb0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-passdb0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-policy-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-policy-python3-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-policy0-python3-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-policy0-python3-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-util-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-util0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamba-util0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamdb-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamdb0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsamdb0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsmbclient-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsmbclient0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsmbclient0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsmbconf-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsmbconf0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsmbconf0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsmbldap-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsmbldap2-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libsmbldap2-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libtevent-util-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libtevent-util0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libtevent-util0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libwbclient-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libwbclient0-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"libwbclient0-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"python3-ldb-2.0.12-lp152.2.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"python3-ldb-debuginfo-2.0.12-lp152.2.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"python3-ldb-devel-2.0.12-lp152.2.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-ad-dc-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-ad-dc-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-client-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-client-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-core-devel-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-debugsource-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-dsdb-modules-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-dsdb-modules-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-libs-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-libs-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-libs-python3-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-libs-python3-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-python3-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-python3-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-test-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-test-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-winbind-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"samba-winbind-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libdcerpc-binding0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libdcerpc-binding0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libdcerpc-samr0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libdcerpc-samr0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libdcerpc0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libdcerpc0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libldb2-32bit-2.0.12-lp152.2.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libldb2-32bit-debuginfo-2.0.12-lp152.2.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libndr-krb5pac0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libndr-krb5pac0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libndr-nbt0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libndr-nbt0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libndr-standard0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libndr-standard0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libndr0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libndr0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libnetapi-devel-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libnetapi0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libnetapi0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamba-credentials0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamba-credentials0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamba-errors0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamba-errors0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamba-hostconfig0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamba-hostconfig0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamba-passdb0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamba-passdb0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamba-policy0-python3-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamba-policy0-python3-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamba-util0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamba-util0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamdb0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsamdb0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsmbclient0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsmbclient0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsmbconf0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsmbconf0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsmbldap2-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libsmbldap2-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libtevent-util0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libtevent-util0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libwbclient0-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"libwbclient0-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"python3-ldb-32bit-2.0.12-lp152.2.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"python3-ldb-32bit-debuginfo-2.0.12-lp152.2.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"samba-ad-dc-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"samba-ad-dc-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"samba-ceph-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"samba-ceph-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"samba-client-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"samba-client-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"samba-libs-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"samba-libs-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"samba-libs-python3-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"samba-libs-python3-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"samba-winbind-32bit-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", cpu:"x86_64", reference:"samba-winbind-32bit-debuginfo-4.11.11+git.180.2cf3b203f07-lp152.3.6.1") ) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ldb-debugsource / ldb-tools / ldb-tools-debuginfo / libldb-devel / etc");
}

References

Related

gentoo 1
suse 5
nessus 50
openvas 51
altlinux 2
fedora 10
cisa 2
freebsd 2
mageia 2
ubuntu 6
rosalinux 2
osv 6
debian 1
samba 5
veracode 5
cvelist 5
cve 5
debiancve 5
nvd 6
alpinelinux 5
ubuntucve 6
redhatcve 6
prion 6
almalinux 1
redhat 3
oraclelinux 1
gentoo
gentoo
Samba: Multiple vulnerabilities
2020-07-26 00:00:00
suse
suse
Security update for ldb, samba (important)
2020-07-21 00:00:00
Security update for ldb, samba (important)
2020-09-01 00:00:00
Security update for samba (important)
2020-07-18 00:00:00
nessus
nessus
GLSA-202007-15 : Samba: Multiple vulnerabilities
2020-07-27 00:00:00
openSUSE Security Update : ldb / samba (openSUSE-2020-1023)
2020-07-21 00:00:00
SUSE SLED15 / SLES15 Security Update : ldb, samba (SUSE-SU-2020:1948-1)
2020-07-20 00:00:00
openvas
openvas
openSUSE: Security Advisory for ldb, (openSUSE-SU-2020:1313-1)
2020-09-02 00:00:00
openSUSE: Security Advisory for ldb, (openSUSE-SU-2020:1023-1)
2020-07-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:1948-1)
2021-06-09 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.11.11-alt1
2020-07-07 00:00:00
Security fix for the ALT Linux 10 package samba version 4.11.8-alt1
2020-04-28 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: samba-4.11.11-0.fc31
2020-07-18 01:09:09
[SECURITY] Fedora 32 Update: samba-4.12.5-0.fc32
2020-07-04 01:14:40
[SECURITY] Fedora 31 Update: libldb-2.0.12-1.fc31
2020-07-18 01:09:08
cisa
cisa
Samba Releases Security Updates
2020-07-03 00:00:00
Samba Releases Security Updates
2020-04-28 00:00:00
freebsd
freebsd
samba -- Multiple Vulnerabilities
2020-07-02 00:00:00
samba -- multiple vulnerabilities
2020-04-29 00:00:00
mageia
mageia
Updated samba packages fix security vulnerability
2020-07-10 11:01:08
Updated samba packages fix security vulnerabilities
2020-05-08 13:57:54
ubuntu
ubuntu
Samba vulnerabilities
2020-07-02 00:00:00
Samba vulnerabilities
2020-04-28 00:00:00
Samba vulnerability
2020-08-10 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2386
2024-04-02 07:01:49
Advisory ROSA-SA-2021-1967
2021-07-02 18:07:38
osv
osv
samba - security update
2020-11-22 00:00:00
CVE-2020-10700
2020-05-04 21:15:11
CVE-2020-10704
2020-05-06 14:15:10
debian
debian
[SECURITY] [DLA 2463-1] samba security update
2020-11-23 03:18:54
samba
samba
NULL pointer de-reference and use-after-free
2020-07-02 00:00:00
LDAP Denial of Service (stack overflow) in
2020-04-28 00:00:00
Use-after-free in Samba AD DC LDAP Server with ASQ
2020-04-28 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-08-06 21:27:10
Denial Of Service (DoS)
2020-08-06 21:27:07
Use-after-free
2020-09-07 02:36:41
cvelist
cvelist
CVE-2020-10700
2020-05-04 20:03:50
CVE-2020-10704
2020-05-06 00:00:00
CVE-2020-10760
2020-07-06 18:02:10
cve
cve
CVE-2020-10700
2020-05-04 21:15:11
CVE-2020-10704
2020-05-06 14:15:10
CVE-2020-10760
2020-07-06 19:15:12
debiancve
debiancve
CVE-2020-10700
2020-05-04 21:15:11
CVE-2020-14303
2020-07-06 18:15:20
CVE-2020-10760
2020-07-06 19:15:12
nvd
nvd
CVE-2020-10700
2020-05-04 21:15:11
CVE-2020-14303
2020-07-06 18:15:20
CVE-2020-10760
2020-07-06 19:15:12
alpinelinux
alpinelinux
CVE-2020-10700
2020-05-04 21:15:11
CVE-2020-10704
2020-05-06 14:15:10
CVE-2020-10760
2020-07-06 19:15:12
ubuntucve
ubuntucve
CVE-2020-10700
2020-04-28 00:00:00
CVE-2020-14303
2020-07-06 00:00:00
CVE-2020-10704
2020-04-28 00:00:00
redhatcve
redhatcve
CVE-2020-14303
2020-07-02 09:50:50
CVE-2020-10760
2020-07-02 09:50:50
CVE-2020-10700
2020-04-28 10:39:49
prion
prion
Null pointer dereference
2020-07-07 14:15:00
Design/Logic Flaw
2020-07-06 19:15:00
Stack overflow
2020-05-06 14:15:00
almalinux
almalinux
Moderate: libldb security, bug fix, and enhancement update
2020-11-03 12:16:33
redhat
redhat
(RHSA-2020:3118) Moderate: samba security update
2020-07-23 04:26:33
(RHSA-2020:4568) Moderate: libldb security, bug fix, and enhancement update
2020-11-03 12:16:33
(RHSA-2020:3119) Moderate: samba security update
2020-07-23 04:26:36
oraclelinux
oraclelinux
libldb security, bug fix, and enhancement update
2020-11-10 00:00:00

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

EPSS

0.028

Percentile

90.8%

JSON
Related for OPENSUSE-2020-1313.NASL
gentoo1suse5nessus50openvas51altlinux2fedora10cisa2freebsd2mageia2ubuntu6rosalinux2osv6debian1samba5veracode5cvelist5cve5debiancve5nvd6alpinelinux5ubuntucve6redhatcve6prion6almalinux1redhat3oraclelinux1