The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD before 1.16.3.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Base Score: 3.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-dbusUpgrade sssd-ipaUpgrade python-libipa_hbacUpgrade sssd-winbind-idmapUpgrade sssd-polkit-rulesUpgrade sssd-krb5-commonUpgrade libsss_simpleifpUpgrade libipa_hbacUpgrade python-sssdconfigUpgrade python-libsss_nss_idmapUpgrade sssd-commonUpgrade python-sss-murmurUpgrade libsss_idmap-develUpgrade sssd-toolsUpgrade libsss_idmapUpgrade sssd-proxyUpgrade libsss_nss_idmapUpgrade libsss_sudoUpgrade sssd-debuginfoUpgrade sssd-adUpgrade sssd-libwbclient-develUpgrade libsss_certmapUpgrade sssd-krb5Upgrade libsss_autofsUpgrade sssd-libwbclientUpgrade sssd-clientUpgrade libipa_hbac-develUpgrade python-sssUpgrade sssd-kcmUpgrade libsss_certmap-develUpgrade libsss_nss_idmap-develUpgrade sssd-ldapUpgrade sssdUpgrade libsss_simpleifp-develUpgrade sssd-common-pac | Apr 27, 2020 | Jun 26, 2018 |
| Amazon_linux | — | Upgrade sssd | Jan 25, 2019 | Jun 26, 2018 |
| Centos_linux | — | Upgrade sssd-commonUpgrade sssd-clientUpgrade libsss_idmapUpgrade python-libipa_hbacUpgrade sssd-common-pacUpgrade sssd-polkit-rulesUpgrade libsss_nss_idmap-develUpgrade sssd-dbusUpgrade libipa_hbacUpgrade sssd-libwbclientUpgrade libsss_nss_idmapUpgrade libipa_hbac-develUpgrade libsss_autofsUpgrade python-sssUpgrade sssd-toolsUpgrade libsss_certmap-develUpgrade sssd-debuginfoUpgrade python-sss-murmurUpgrade sssd-ipaUpgrade sssd-libwbclient-develUpgrade sssd-krb5Upgrade libsss_certmapUpgrade sssd-kcmUpgrade libsss_idmap-develUpgrade libsss_simpleifp-develUpgrade sssd-krb5-commonUpgrade sssd-winbind-idmapUpgrade sssd-ldapUpgrade python-sssdconfigUpgrade sssd-adUpgrade libsss_sudoUpgrade python-libsss_nss_idmapUpgrade sssdUpgrade sssd-proxyUpgrade libsss_simpleifp | Aug 28, 2019 | Jun 26, 2018 |
| Debian | — | Upgrade sssd | Feb 19, 2019 | Jun 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sssd-krb5-commonUpgrade python-sssdconfigUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifpUpgrade sssd-toolsUpgrade python-sss-murmurUpgrade libsss_sudoUpgrade python-libipa_hbacUpgrade sssd-ldapUpgrade sssd-ipaUpgrade sssd-adUpgrade libsss_idmapUpgrade sssd-proxyUpgrade sssdUpgrade sssd-clientUpgrade sssd-krb5Upgrade sssd-commonUpgrade libsss_certmapUpgrade libsss_autofsUpgrade sssd-dbusUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade python-sssUpgrade libipa_hbacUpgrade sssd-libwbclient | Dec 31, 2018 | Jun 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sssd-proxyUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade sssd-clientUpgrade libsss_autofsUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade libsss_certmapUpgrade libsss_idmapUpgrade sssd-commonUpgrade sssd-dbusUpgrade sssd-krb5Upgrade libsss_simpleifpUpgrade python-libsss_nss_idmapUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade python-sss-murmurUpgrade python-libipa_hbacUpgrade sssdUpgrade python-sssUpgrade python-sssdconfigUpgrade sssd-krb5-commonUpgrade libsss_sudoUpgrade sssd-adUpgrade sssd-ipa | Dec 11, 2018 | Jun 26, 2018 |
| Oracle_linux | — | Upgrade libsss_simpleifpUpgrade libsss_certmap-develUpgrade sssd-ldapUpgrade sssd-clientUpgrade python-sss-murmurUpgrade libsss_certmapUpgrade sssd-krb5Upgrade sssd-common-pacUpgrade sssdUpgrade sssd-libwbclient-develUpgrade libsss_simpleifp-develUpgrade sssd-toolsUpgrade libsss_autofsUpgrade libipa_hbac-develUpgrade sssd-libwbclientUpgrade sssd-dbusUpgrade sssd-krb5-commonUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-ipaUpgrade sssd-polkit-rulesUpgrade python-libsss_nss_idmapUpgrade python-libipa_hbacUpgrade sssd-adUpgrade sssd-kcmUpgrade libsss_sudoUpgrade libsss_idmap-develUpgrade sssd-winbind-idmapUpgrade python-sssUpgrade libsss_idmapUpgrade sssd-proxyUpgrade libsss_nss_idmap-develUpgrade sssd-commonUpgrade python-sssdconfig | Nov 6, 2018 | Jun 26, 2018 |
| Redhat_linux | — | Upgrade sssd-krb5-commonUpgrade libsss_sudoUpgrade python-sssUpgrade python-libipa_hbacUpgrade libipa_hbacUpgrade sssd-kcmUpgrade sssd-adUpgrade sssd-proxyUpgrade libsss_idmapUpgrade sssd-polkit-rulesUpgrade python-sssdconfigUpgrade sssd-winbind-idmapUpgrade sssd-commonUpgrade libsss_simpleifp-develUpgrade libsss_simpleifpUpgrade sssdUpgrade libsss_idmap-develUpgrade python-sss-murmurUpgrade python-libsss_nss_idmapUpgrade sssd-ipaUpgrade sssd-krb5Upgrade sssd-libwbclient-develUpgrade libsss_certmap-develNo solution existsUpgrade sssd-debuginfoUpgrade libsss_nss_idmap-develUpgrade sssd-toolsUpgrade libsss_certmapUpgrade sssd-clientUpgrade sssd-common-pacUpgrade libipa_hbac-develUpgrade libsss_autofsUpgrade sssd-libwbclientUpgrade sssd-dbusUpgrade sssd-ldapUpgrade libsss_nss_idmap | Oct 31, 2018 | Jun 26, 2018 |
| Suse | — | Upgrade sssd-ldapUpgrade python3-sss-murmurUpgrade sssd-wbclient-develUpgrade sssd-dbusUpgrade libsss_nss_idmap-develUpgrade python3-sss_nss_idmapUpgrade libsss_simpleifp-develUpgrade libipa_hbac0Upgrade sssdUpgrade sssd-adUpgrade sssd-toolsUpgrade python3-ipa_hbacUpgrade sssd-krb5Upgrade libsss_idmap0Upgrade sssd-commonUpgrade sssd-32bitUpgrade sssd-krb5-commonUpgrade sssd-winbind-idmapUpgrade sssd-proxyUpgrade python3-sssd-configUpgrade libipa_hbac-develUpgrade libsss_sudoUpgrade sssd-wbclientUpgrade libsss_certmap0Upgrade python-sssd-configUpgrade libsss_nss_idmap0Upgrade libnfsidmap-sssUpgrade libsss_idmap-develUpgrade libsss_simpleifp0Upgrade sssd-ipaUpgrade libsss_certmap-devel | Aug 10, 2018 | Jun 26, 2018 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jun 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub