The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libsss_idmapUpgrade libsss_autofsUpgrade sssd-toolsUpgrade libipa_hbacUpgrade libipa_hbac-pythonUpgrade sssd-clientUpgrade libipa_hbac-develUpgrade libsss_idmap-develUpgrade sssdUpgrade libsss_sudoUpgrade libsss_sudo-devel | Dec 1, 2016 | Feb 24, 2013 |
| Debian | — | Upgrade sssd | Jul 30, 2024 | Feb 24, 2013 |
| Oracle_linux | — | Upgrade libsss_idmapUpgrade libsss_sudo-develUpgrade libsss_sudoUpgrade sssd-toolsUpgrade sssdUpgrade libsss_idmap-develUpgrade libipa_hbac-pythonUpgrade libipa_hbac-develUpgrade libsss_autofsUpgrade libipa_hbacUpgrade sssd-client | Oct 16, 2024 | Feb 24, 2013 |
| Suse | — | Upgrade sssd-wbclientUpgrade sssdUpgrade libipa_hbac0Upgrade libipa_hbac-develUpgrade sssd-ipaUpgrade libsss_idmap-develUpgrade libsss_nss_idmap-develUpgrade sssd-proxyUpgrade libsss_nss_idmap0Upgrade sssd-krb5-commonUpgrade sssd-32bitUpgrade sssd-adUpgrade libsss_idmap0Upgrade sssd-ldapUpgrade python3-sssd-configUpgrade libsss_sudoUpgrade libsss_sudo-develUpgrade python-sssd-configUpgrade libsss_simpleifp-develUpgrade sssd-toolsUpgrade libsss_certmap-develUpgrade libsss_simpleifp0Upgrade sssd-krb5Upgrade sssd-dbusUpgrade libsss_certmap0Upgrade sssd-wbclient-devel | Aug 9, 2024 | Feb 24, 2013 |
| Ubuntu | — | Upgrade sssd | Nov 19, 2024 | Feb 24, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub