The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade sssdUpgrade libsss_sudo-develUpgrade libipa_hbac-develUpgrade libsss_sudoUpgrade libsss_idmap-develUpgrade libsss_autofsUpgrade sssd-clientUpgrade libipa_hbac-pythonUpgrade libipa_hbacUpgrade libsss_idmapUpgrade sssd-tools | Dec 1, 2016 | Feb 24, 2013 |
| Debian | — | Upgrade sssd | Jul 30, 2024 | Feb 24, 2013 |
| Oracle_linux | — | Upgrade libipa_hbacUpgrade sssd-clientUpgrade libipa_hbac-develUpgrade libsss_autofsUpgrade libipa_hbac-pythonUpgrade libsss_idmap-develUpgrade libsss_sudoUpgrade sssdUpgrade sssd-toolsUpgrade libsss_sudo-develUpgrade libsss_idmap | Oct 16, 2024 | Feb 24, 2013 |
| Suse | — | Upgrade sssd-wbclientUpgrade sssdUpgrade sssd-ldapUpgrade libsss_nss_idmap-develUpgrade libsss_simpleifp-develUpgrade python-sssd-configUpgrade sssd-proxyUpgrade sssd-ipaUpgrade sssd-32bitUpgrade libsss_idmap-develUpgrade python3-sssd-configUpgrade sssd-adUpgrade libsss_nss_idmap0Upgrade libipa_hbac0Upgrade sssd-krb5-commonUpgrade libsss_sudo-develUpgrade libsss_idmap0Upgrade libsss_sudoUpgrade libipa_hbac-develUpgrade libsss_certmap-develUpgrade libsss_certmap0Upgrade sssd-wbclient-develUpgrade libsss_simpleifp0Upgrade sssd-dbusUpgrade sssd-toolsUpgrade sssd-krb5 | Aug 9, 2024 | Feb 24, 2013 |
| Ubuntu | — | Upgrade sssd | Nov 19, 2024 | Feb 24, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub