The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD before 1.16.3.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Base Score: 3.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-common-pacUpgrade sssd-clientUpgrade sssd-ldapUpgrade sssd-libwbclientUpgrade sssd-krb5Upgrade libsss_certmapUpgrade python-sssUpgrade libsss_simpleifp-develUpgrade libsss_autofsUpgrade libsss_certmap-develUpgrade libsss_nss_idmap-develUpgrade libipa_hbac-develUpgrade sssd-kcmUpgrade sssdUpgrade sssd-libwbclient-develUpgrade sssd-adUpgrade sssd-ipaUpgrade sssd-commonUpgrade sssd-polkit-rulesUpgrade sssd-winbind-idmapUpgrade python-sss-murmurUpgrade sssd-dbusUpgrade libsss_idmap-develUpgrade libsss_sudoUpgrade sssd-proxyUpgrade python-libsss_nss_idmapUpgrade python-libipa_hbacUpgrade sssd-krb5-commonUpgrade libsss_simpleifpUpgrade sssd-toolsUpgrade sssd-debuginfoUpgrade libsss_nss_idmapUpgrade libsss_idmapUpgrade python-sssdconfigUpgrade libipa_hbac | Apr 27, 2020 | Jun 26, 2018 |
| Amazon_linux | — | Upgrade sssd | Jan 25, 2019 | Jun 26, 2018 |
| Centos_linux | — | Upgrade sssd-krb5Upgrade python-sssdconfigUpgrade sssd-libwbclient-develUpgrade python-libsss_nss_idmapUpgrade sssd-winbind-idmapUpgrade sssd-ldapUpgrade libsss_sudoUpgrade sssd-kcmUpgrade sssd-ipaUpgrade sssd-adUpgrade libsss_idmap-develUpgrade python-sss-murmurUpgrade libsss_simpleifpUpgrade sssd-krb5-commonUpgrade sssdUpgrade sssd-proxyUpgrade libsss_simpleifp-develUpgrade libsss_certmapUpgrade sssd-debuginfoUpgrade libsss_autofsUpgrade sssd-polkit-rulesUpgrade libsss_certmap-develUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade python-libipa_hbacUpgrade sssd-common-pacUpgrade libipa_hbacUpgrade sssd-dbusUpgrade sssd-commonUpgrade libipa_hbac-develUpgrade libsss_nss_idmap-develUpgrade sssd-clientUpgrade libsss_idmapUpgrade libsss_nss_idmapUpgrade python-sss | Aug 28, 2019 | Jun 26, 2018 |
| Debian | — | Upgrade sssd | Feb 19, 2019 | Jun 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sssd-ldapUpgrade libsss_simpleifpUpgrade sssd-ipaUpgrade sssd-krb5-commonUpgrade sssd-toolsUpgrade sssd-adUpgrade libsss_idmapUpgrade python-libsss_nss_idmapUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade libsss_sudoUpgrade python-libipa_hbacUpgrade sssdUpgrade sssd-proxyUpgrade sssd-commonUpgrade sssd-libwbclientUpgrade sssd-krb5Upgrade python-sssUpgrade libipa_hbacUpgrade libsss_nss_idmapUpgrade sssd-dbusUpgrade libsss_autofsUpgrade sssd-common-pacUpgrade sssd-clientUpgrade libsss_certmap | Dec 31, 2018 | Jun 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sssd-proxyUpgrade libsss_autofsUpgrade libsss_certmapUpgrade sssd-clientUpgrade sssd-commonUpgrade libsss_idmapUpgrade sssd-dbusUpgrade sssd-krb5Upgrade sssd-toolsUpgrade sssd-ldapUpgrade sssd-common-pacUpgrade sssd-libwbclientUpgrade python-sssdconfigUpgrade python-libipa_hbacUpgrade sssdUpgrade libsss_simpleifpUpgrade libipa_hbacUpgrade sssd-ipaUpgrade sssd-adUpgrade python-sssUpgrade sssd-krb5-commonUpgrade libsss_sudoUpgrade python-sss-murmurUpgrade python-libsss_nss_idmapUpgrade libsss_nss_idmap | Dec 11, 2018 | Jun 26, 2018 |
| Oracle_linux | — | Upgrade sssd-krb5Upgrade sssd-clientUpgrade sssd-toolsUpgrade sssd-libwbclient-develUpgrade libipa_hbac-develUpgrade sssdUpgrade libsss_simpleifp-develUpgrade python-sss-murmurUpgrade sssd-ldapUpgrade sssd-common-pacUpgrade libsss_certmapUpgrade libsss_autofsUpgrade libsss_simpleifpUpgrade libsss_certmap-develUpgrade sssd-ipaUpgrade libsss_nss_idmap-develUpgrade sssd-adUpgrade sssd-winbind-idmapUpgrade libipa_hbacUpgrade sssd-krb5-commonUpgrade sssd-kcmUpgrade sssd-proxyUpgrade libsss_idmapUpgrade sssd-commonUpgrade libsss_idmap-develUpgrade sssd-libwbclientUpgrade libsss_sudoUpgrade python-libipa_hbacUpgrade sssd-polkit-rulesUpgrade sssd-dbusUpgrade python-sssUpgrade libsss_nss_idmapUpgrade python-libsss_nss_idmapUpgrade python-sssdconfig | Nov 6, 2018 | Jun 26, 2018 |
| Redhat_linux | — | Upgrade sssd-common-pacUpgrade sssd-debuginfoUpgrade sssd-clientUpgrade libipa_hbac-develUpgrade sssd-krb5Upgrade libsss_certmapUpgrade libsss_certmap-develUpgrade libsss_nss_idmapUpgrade sssd-dbusUpgrade libsss_autofsUpgrade libsss_nss_idmap-develUpgrade sssd-toolsUpgrade sssd-libwbclient-develNo solution existsUpgrade sssd-ldapUpgrade sssd-libwbclientUpgrade python-sssUpgrade libsss_sudoUpgrade sssd-proxyUpgrade libsss_idmap-develUpgrade sssd-ipaUpgrade sssd-commonUpgrade sssdUpgrade sssd-kcmUpgrade python-libipa_hbacUpgrade libsss_simpleifp-develUpgrade python-libsss_nss_idmapUpgrade sssd-winbind-idmapUpgrade libipa_hbacUpgrade python-sssdconfigUpgrade python-sss-murmurUpgrade libsss_idmapUpgrade sssd-krb5-commonUpgrade libsss_simpleifpUpgrade sssd-polkit-rulesUpgrade sssd-ad | Oct 31, 2018 | Jun 26, 2018 |
| Suse | — | Upgrade libsss_idmap0Upgrade python3-ipa_hbacUpgrade sssd-commonUpgrade libipa_hbac0Upgrade sssd-ldapUpgrade sssd-krb5Upgrade sssd-proxyUpgrade sssd-adUpgrade sssd-dbusUpgrade sssd-krb5-commonUpgrade libsss_simpleifp-develUpgrade sssd-32bitUpgrade sssdUpgrade python3-sss-murmurUpgrade libsss_nss_idmap-develUpgrade sssd-wbclient-develUpgrade python3-sss_nss_idmapUpgrade sssd-winbind-idmapUpgrade sssd-toolsUpgrade libsss_nss_idmap0Upgrade libsss_certmap0Upgrade libnfsidmap-sssUpgrade libsss_simpleifp0Upgrade libsss_idmap-develUpgrade sssd-ipaUpgrade libsss_sudoUpgrade libipa_hbac-develUpgrade python3-sssd-configUpgrade libsss_certmap-develUpgrade sssd-wbclientUpgrade python-sssd-config | Aug 10, 2018 | Jun 26, 2018 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jun 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub