System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade sssd-clientUpgrade sssd-toolsUpgrade libsss_autofsUpgrade libipa_hbac-pythonUpgrade libipa_hbacUpgrade libsss_idmap-develUpgrade libipa_hbac-develUpgrade libsss_sudoUpgrade libsss_idmapUpgrade libsss_sudo-develUpgrade sssd | Dec 1, 2016 | Feb 24, 2013 |
| Debian | — | Upgrade sssd | Jul 30, 2024 | Feb 24, 2013 |
| Oracle_linux | — | Upgrade libsss_autofsUpgrade libsss_idmap-develUpgrade sssdUpgrade libsss_sudoUpgrade sssd-clientUpgrade libipa_hbac-develUpgrade libipa_hbac-pythonUpgrade libipa_hbacUpgrade libsss_sudo-develUpgrade libsss_idmapUpgrade sssd-tools | Oct 16, 2024 | Feb 24, 2013 |
| Suse | — | Upgrade sssd-toolsUpgrade libipa_hbac0Upgrade sssd-wbclientUpgrade libsss_simpleifp-develUpgrade sssd-ldapUpgrade libsss_idmap0Upgrade libsss_sudoUpgrade libsss_sudo-develUpgrade sssd-ipaUpgrade libsss_nss_idmap-develUpgrade sssd-dbusUpgrade sssd-wbclient-develUpgrade libsss_idmap-develUpgrade sssd-proxyUpgrade sssd-krb5Upgrade python3-sssd-configUpgrade python-sssd-configUpgrade libsss_certmap0Upgrade sssd-32bitUpgrade sssdUpgrade libsss_certmap-develUpgrade libsss_nss_idmap0Upgrade sssd-adUpgrade libsss_simpleifp0Upgrade libipa_hbac-develUpgrade sssd-krb5-common | Aug 9, 2024 | Feb 24, 2013 |
| Ubuntu | — | Upgrade sssd | Nov 19, 2024 | Feb 24, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub