The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD before 1.16.3.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Base Score: 3.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-libipa_hbacUpgrade libsss_idmapUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-polkit-rulesUpgrade sssd-toolsUpgrade sssd-debuginfoUpgrade sssd-commonUpgrade sssd-adUpgrade libsss_simpleifpUpgrade sssd-proxyUpgrade sssd-dbusUpgrade python-sss-murmurUpgrade libsss_idmap-develUpgrade libsss_sudoUpgrade sssd-krb5-commonUpgrade sssd-ipaUpgrade python-sssdconfigUpgrade sssd-winbind-idmapUpgrade python-libsss_nss_idmapUpgrade libsss_certmapUpgrade sssdUpgrade sssd-common-pacUpgrade sssd-krb5Upgrade libsss_simpleifp-develUpgrade libsss_certmap-develUpgrade libipa_hbac-develUpgrade sssd-kcmUpgrade sssd-libwbclient-develUpgrade libsss_nss_idmap-develUpgrade sssd-clientUpgrade sssd-ldapUpgrade python-sssUpgrade libsss_autofsUpgrade sssd-libwbclient | Apr 27, 2020 | Jun 26, 2018 |
| Amazon_linux | — | Upgrade sssd | Jan 25, 2019 | Jun 26, 2018 |
| Centos_linux | — | Upgrade sssd-krb5Upgrade sssdUpgrade libsss_simpleifp-develUpgrade sssd-winbind-idmapUpgrade libsss_certmapUpgrade libsss_sudoUpgrade sssd-krb5-commonUpgrade libsss_simpleifpUpgrade sssd-libwbclient-develUpgrade python-libsss_nss_idmapUpgrade sssd-proxyUpgrade sssd-adUpgrade sssd-kcmUpgrade sssd-ldapUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade sssd-ipaUpgrade libsss_idmap-develUpgrade sssd-libwbclientUpgrade python-libipa_hbacUpgrade sssd-polkit-rulesUpgrade libsss_nss_idmap-develUpgrade sssd-debuginfoUpgrade libsss_idmapUpgrade sssd-clientUpgrade sssd-commonUpgrade libsss_certmap-develUpgrade sssd-dbusUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-common-pacUpgrade sssd-toolsUpgrade python-sssUpgrade libipa_hbac-develUpgrade libsss_autofs | Aug 28, 2019 | Jun 26, 2018 |
| Debian | — | Upgrade sssd | Feb 19, 2019 | Jun 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsss_idmapUpgrade python-libsss_nss_idmapUpgrade sssd-ldapUpgrade sssd-ipaUpgrade libsss_sudoUpgrade sssd-proxyUpgrade sssdUpgrade libsss_simpleifpUpgrade python-sssdconfigUpgrade sssd-krb5-commonUpgrade python-libipa_hbacUpgrade python-sss-murmurUpgrade sssd-toolsUpgrade sssd-adUpgrade sssd-krb5Upgrade sssd-commonUpgrade python-sssUpgrade libipa_hbacUpgrade sssd-clientUpgrade sssd-libwbclientUpgrade sssd-dbusUpgrade libsss_nss_idmapUpgrade libsss_autofsUpgrade sssd-common-pacUpgrade libsss_certmap | Dec 31, 2018 | Jun 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsss_simpleifpUpgrade python-libipa_hbacUpgrade sssd-krb5-commonUpgrade python-sssUpgrade python-sssdconfigUpgrade sssd-adUpgrade libipa_hbacUpgrade libsss_sudoUpgrade sssdUpgrade python-libsss_nss_idmapUpgrade sssd-ipaUpgrade python-sss-murmurUpgrade libsss_nss_idmapUpgrade sssd-commonUpgrade sssd-clientUpgrade libsss_idmapUpgrade sssd-dbusUpgrade sssd-proxyUpgrade libsss_certmapUpgrade libsss_autofsUpgrade sssd-toolsUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade sssd-libwbclientUpgrade sssd-krb5 | Dec 11, 2018 | Jun 26, 2018 |
| Oracle_linux | — | Upgrade sssd-polkit-rulesUpgrade sssd-kcmUpgrade sssd-ipaUpgrade libipa_hbacUpgrade sssd-krb5-commonUpgrade libsss_nss_idmapUpgrade libsss_nss_idmap-develUpgrade python-sssdconfigUpgrade python-libsss_nss_idmapUpgrade libsss_idmapUpgrade python-libipa_hbacUpgrade libsss_sudoUpgrade sssd-proxyUpgrade python-sssUpgrade sssd-commonUpgrade sssd-libwbclientUpgrade libsss_idmap-develUpgrade sssd-winbind-idmapUpgrade sssd-dbusUpgrade sssd-adUpgrade libsss_certmapUpgrade libsss_simpleifpUpgrade sssd-libwbclient-develUpgrade libsss_certmap-develUpgrade sssd-krb5Upgrade sssd-common-pacUpgrade libsss_autofsUpgrade libipa_hbac-develUpgrade sssd-clientUpgrade sssdUpgrade python-sss-murmurUpgrade sssd-toolsUpgrade libsss_simpleifp-develUpgrade sssd-ldap | Nov 6, 2018 | Jun 26, 2018 |
| Redhat_linux | — | Upgrade python-libsss_nss_idmapUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade sssd-adUpgrade sssd-kcmUpgrade sssdUpgrade python-libipa_hbacUpgrade python-sssUpgrade libsss_simpleifp-develUpgrade sssd-ipaUpgrade sssd-winbind-idmapUpgrade libsss_sudoUpgrade sssd-commonUpgrade libsss_idmap-develUpgrade libipa_hbacUpgrade libsss_simpleifpUpgrade sssd-proxyUpgrade sssd-krb5-commonUpgrade libsss_idmapUpgrade sssd-polkit-rulesUpgrade sssd-dbusUpgrade libsss_certmap-develUpgrade sssd-libwbclient-develUpgrade sssd-toolsUpgrade libsss_autofsUpgrade sssd-clientUpgrade sssd-krb5Upgrade libsss_nss_idmapUpgrade libsss_certmapUpgrade libipa_hbac-develNo solution existsUpgrade sssd-common-pacUpgrade libsss_nss_idmap-develUpgrade sssd-debuginfoUpgrade sssd-libwbclientUpgrade sssd-ldap | Oct 31, 2018 | Jun 26, 2018 |
| Suse | — | Upgrade python3-sssd-configUpgrade libsss_idmap-develUpgrade libnfsidmap-sssUpgrade libsss_simpleifp0Upgrade libsss_sudoUpgrade libipa_hbac-develUpgrade libsss_certmap-develUpgrade libsss_certmap0Upgrade sssd-ipaUpgrade python-sssd-configUpgrade libsss_nss_idmap0Upgrade sssd-wbclientUpgrade python3-sss_nss_idmapUpgrade sssd-dbusUpgrade sssd-wbclient-develUpgrade sssdUpgrade python3-sss-murmurUpgrade sssd-krb5-commonUpgrade python3-ipa_hbacUpgrade libipa_hbac0Upgrade libsss_nss_idmap-develUpgrade sssd-ldapUpgrade sssd-winbind-idmapUpgrade sssd-toolsUpgrade sssd-commonUpgrade sssd-adUpgrade sssd-32bitUpgrade sssd-proxyUpgrade sssd-krb5Upgrade libsss_idmap0Upgrade libsss_simpleifp-devel | Aug 10, 2018 | Jun 26, 2018 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jun 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub