CVE-2020-14387 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2020-14387 Interim 1 31 2023-09-22T23:49:41Z current 2021-05-30T14:41:18Z 2023-09-22T23:49:41Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2020-14387 A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit the flaw by performing a man-in-the-middle attack using a valid certificate for another hostname which could compromise confidentiality and integrity of data transmitted using rsync-ssl. The highest threat from this vulnerability is to data confidentiality and integrity. This flaw affects rsync versions before 3.2.4. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sle-micro-rancher/5.2:latest Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production SUSE CaaS Platform 3.0 SUSE CaaS Platform 4.0 SUSE Container as a Service Platform 1.0 SUSE Container as a Service Platform 2.0 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Manager Retail Branch Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.4 openSUSE Tumbleweed rsync rsync-3.2.3-150000.4.23.2 rsync-3.2.3-150400.1.53 rsync-3.2.3-150400.3.3.1 rsync-3.2.3-150400.3.8.1 rsync-3.2.3-2.6 rsync-3.2.3-150000.4.23.2 as a component of Container suse/sle-micro-rancher/5.2:latest rsync-3.2.3-150000.4.23.2 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production rsync-3.2.3-150000.4.23.2 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production rsync-3.2.3-150000.4.23.2 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production rsync-3.2.3-150000.4.23.2 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production rsync-3.2.3-150000.4.23.2 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure rsync-3.2.3-150000.4.23.2 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM rsync-3.2.3-150000.4.23.2 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE rsync-3.2.3-150000.4.23.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure rsync-3.2.3-150000.4.23.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM rsync-3.2.3-150000.4.23.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE rsync-3.2.3-150000.4.23.2 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production rsync-3.2.3-150000.4.23.2 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production rsync-3.2.3-150000.4.23.2 as a component of SUSE CaaS Platform 4.0 rsync-3.2.3-150000.4.23.2 as a component of SUSE Enterprise Storage 7.1 rsync-3.2.3-150000.4.23.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS rsync-3.2.3-150000.4.23.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS rsync-3.2.3-150000.4.23.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS rsync-3.2.3-150000.4.23.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS rsync-3.2.3-150000.4.23.2 as a component of SUSE Linux Enterprise Micro 5.1 rsync-3.2.3-150000.4.23.2 as a component of SUSE Linux Enterprise Micro 5.2 rsync-3.2.3-150400.3.3.1 as a component of SUSE Linux Enterprise Micro 5.3 rsync-3.2.3-150400.3.8.1 as a component of SUSE Linux Enterprise Micro 5.4 rsync-3.2.3-150400.1.53 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 rsync-3.2.3-150400.3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 rsync-3.2.3-150000.4.23.2 as a component of SUSE Linux Enterprise Real Time 15 SP3 rsync-3.2.3-150000.4.23.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS rsync-3.2.3-150000.4.23.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS rsync-3.2.3-150000.4.23.2 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS rsync-3.2.3-150000.4.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 rsync-3.2.3-150000.4.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 rsync-3.2.3-150000.4.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 rsync-3.2.3-150000.4.23.2 as a component of SUSE Manager Proxy 4.2 rsync-3.2.3-150000.4.23.2 as a component of SUSE Manager Retail Branch Server 4.2 rsync-3.2.3-150000.4.23.2 as a component of SUSE Manager Server 4.2 rsync-3.2.3-150400.1.53 as a component of openSUSE Leap 15.4 rsync-3.2.3-2.6 as a component of openSUSE Tumbleweed rsync as a component of SUSE CaaS Platform 3.0 rsync as a component of SUSE Container as a Service Platform 1.0 rsync as a component of SUSE Container as a Service Platform 2.0 rsync as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 rsync as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 rsync as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS rsync as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 rsync as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 rsync as a component of SUSE Linux Enterprise Server 11 SP1 rsync as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata rsync as a component of SUSE Linux Enterprise Server 11 SP3 rsync as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata rsync as a component of SUSE Linux Enterprise Server 11 SP4 LTSS rsync as a component of SUSE Linux Enterprise Server 12 SP2-BCL rsync as a component of SUSE Linux Enterprise Server 12 SP2-LTSS rsync as a component of SUSE Linux Enterprise Server 12 SP3-BCL rsync as a component of SUSE Linux Enterprise Server 12 SP3-LTSS rsync as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rsync as a component of SUSE Linux Enterprise Server 12 SP5 rsync as a component of SUSE Linux Enterprise Server 15-ESPOS rsync as a component of SUSE Linux Enterprise Server 15-LTSS rsync as a component of SUSE Linux Enterprise Server Teradata 12 SP3 rsync as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 rsync as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsync as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsync as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit the flaw by performing a man-in-the-middle attack using a valid certificate for another hostname which could compromise confidentiality and integrity of data transmitted using rsync-ssl. The highest threat from this vulnerability is to data confidentiality and integrity. This flaw affects rsync versions before 3.2.4. CVE-2020-14387 Container suse/sle-micro-rancher/5.2:latest:rsync-3.2.3-150000.4.23.2 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:rsync-3.2.3-150000.4.23.2 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:rsync-3.2.3-150000.4.23.2 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:rsync-3.2.3-150000.4.23.2 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:rsync-3.2.3-150000.4.23.2 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:rsync-3.2.3-150000.4.23.2 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:rsync-3.2.3-150000.4.23.2 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:rsync-3.2.3-150000.4.23.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:rsync-3.2.3-150000.4.23.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:rsync-3.2.3-150000.4.23.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:rsync-3.2.3-150000.4.23.2 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:rsync-3.2.3-150000.4.23.2 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:rsync-3.2.3-150000.4.23.2 SUSE CaaS Platform 4.0:rsync-3.2.3-150000.4.23.2 SUSE Enterprise Storage 7.1:rsync-3.2.3-150000.4.23.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:rsync-3.2.3-150000.4.23.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:rsync-3.2.3-150000.4.23.2 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:rsync-3.2.3-150000.4.23.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:rsync-3.2.3-150000.4.23.2 SUSE Linux Enterprise Micro 5.1:rsync-3.2.3-150000.4.23.2 SUSE Linux Enterprise Micro 5.2:rsync-3.2.3-150000.4.23.2 SUSE Linux Enterprise Micro 5.3:rsync-3.2.3-150400.3.3.1 SUSE Linux Enterprise Micro 5.4:rsync-3.2.3-150400.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:rsync-3.2.3-150400.1.53 SUSE Linux Enterprise Module for Basesystem 15 SP5:rsync-3.2.3-150400.3.8.1 SUSE Linux Enterprise Real Time 15 SP3:rsync-3.2.3-150000.4.23.2 SUSE Linux Enterprise Server 15 SP1-LTSS:rsync-3.2.3-150000.4.23.2 SUSE Linux Enterprise Server 15 SP2-LTSS:rsync-3.2.3-150000.4.23.2 SUSE Linux Enterprise Server 15 SP3-LTSS:rsync-3.2.3-150000.4.23.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:rsync-3.2.3-150000.4.23.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:rsync-3.2.3-150000.4.23.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:rsync-3.2.3-150000.4.23.2 SUSE Manager Proxy 4.2:rsync-3.2.3-150000.4.23.2 SUSE Manager Retail Branch Server 4.2:rsync-3.2.3-150000.4.23.2 SUSE Manager Server 4.2:rsync-3.2.3-150000.4.23.2 openSUSE Leap 15.4:rsync-3.2.3-150400.1.53 openSUSE Tumbleweed:rsync-3.2.3-2.6 SUSE CaaS Platform 3.0:rsync SUSE Container as a Service Platform 1.0:rsync SUSE Container as a Service Platform 2.0:rsync SUSE Linux Enterprise High Performance Computing 12 SP4:rsync SUSE Linux Enterprise High Performance Computing 12 SP5:rsync SUSE Linux Enterprise High Performance Computing 15-LTSS:rsync SUSE Linux Enterprise Module for Basesystem 15 SP1:rsync SUSE Linux Enterprise Module for Basesystem 15 SP2:rsync SUSE Linux Enterprise Server 11 SP1 for Teradata:rsync SUSE Linux Enterprise Server 11 SP1:rsync SUSE Linux Enterprise Server 11 SP3 for Teradata:rsync SUSE Linux Enterprise Server 11 SP3:rsync SUSE Linux Enterprise Server 11 SP4 LTSS:rsync SUSE Linux Enterprise Server 12 SP2-BCL:rsync SUSE Linux Enterprise Server 12 SP2-LTSS:rsync SUSE Linux Enterprise Server 12 SP3-BCL:rsync SUSE Linux Enterprise Server 12 SP3-LTSS:rsync SUSE Linux Enterprise Server 12 SP4-LTSS:rsync SUSE Linux Enterprise Server 12 SP5:rsync SUSE Linux Enterprise Server 15-ESPOS:rsync SUSE Linux Enterprise Server 15-LTSS:rsync SUSE Linux Enterprise Server Teradata 12 SP3:rsync SUSE Linux Enterprise Server for SAP Applications 12 SP2:rsync SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsync SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsync SUSE Linux Enterprise Server for SAP Applications 12 SP5:rsync important 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N