System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libipa_hbacUpgrade sssd-toolsUpgrade sssd-clientUpgrade libipa_hbac-pythonUpgrade libsss_autofsUpgrade libsss_idmap-develUpgrade libsss_sudo-develUpgrade libsss_sudoUpgrade sssdUpgrade libsss_idmapUpgrade libipa_hbac-devel | Dec 1, 2016 | Feb 24, 2013 |
| Debian | — | Upgrade sssd | Jul 30, 2024 | Feb 24, 2013 |
| Oracle_linux | — | Upgrade sssdUpgrade libsss_idmap-develUpgrade libsss_autofsUpgrade libsss_sudoUpgrade sssd-toolsUpgrade libipa_hbac-develUpgrade libipa_hbac-pythonUpgrade libsss_sudo-develUpgrade libsss_idmapUpgrade libipa_hbacUpgrade sssd-client | Oct 16, 2024 | Feb 24, 2013 |
| Suse | — | Upgrade sssd-proxyUpgrade sssd-toolsUpgrade sssd-wbclient-develUpgrade sssd-wbclientUpgrade libsss_nss_idmap-develUpgrade libipa_hbac0Upgrade sssd-ipaUpgrade sssd-dbusUpgrade libsss_idmap0Upgrade sssd-ldapUpgrade libsss_idmap-develUpgrade libsss_sudo-develUpgrade libsss_simpleifp-develUpgrade libsss_sudoUpgrade libsss_certmap-develUpgrade libsss_nss_idmap0Upgrade sssdUpgrade libsss_certmap0Upgrade sssd-32bitUpgrade sssd-krb5Upgrade sssd-adUpgrade libipa_hbac-develUpgrade libsss_simpleifp0Upgrade python3-sssd-configUpgrade python-sssd-configUpgrade sssd-krb5-common | Aug 9, 2024 | Feb 24, 2013 |
| Ubuntu | — | Upgrade sssd | Nov 19, 2024 | Feb 24, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub