The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD before 1.16.3.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Base Score: 3.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libsss_certmapUpgrade libipa_hbac-develUpgrade sssdUpgrade sssd-krb5Upgrade sssd-libwbclient-develUpgrade libsss_nss_idmap-develUpgrade sssd-kcmUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade sssd-clientUpgrade libsss_simpleifp-develUpgrade sssd-libwbclientUpgrade libsss_autofsUpgrade libsss_certmap-develUpgrade python-sssUpgrade sssd-winbind-idmapUpgrade python-libipa_hbacUpgrade sssd-ipaUpgrade sssd-dbusUpgrade libsss_nss_idmapUpgrade libsss_idmapUpgrade libipa_hbacUpgrade sssd-krb5-commonUpgrade libsss_idmap-develUpgrade python-sss-murmurUpgrade python-libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssd-adUpgrade libsss_sudoUpgrade sssd-commonUpgrade sssd-polkit-rulesUpgrade sssd-proxyUpgrade sssd-debuginfoUpgrade sssd-toolsUpgrade libsss_simpleifp | Apr 27, 2020 | Jun 26, 2018 |
| Amazon_linux | — | Upgrade sssd | Jan 25, 2019 | Jun 26, 2018 |
| Centos_linux | — | Upgrade python-libipa_hbacUpgrade sssd-debuginfoUpgrade sssd-dbusUpgrade sssd-toolsUpgrade sssd-clientUpgrade libsss_autofsUpgrade libsss_nss_idmap-develUpgrade sssd-polkit-rulesUpgrade python-sssUpgrade libipa_hbac-develUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade libsss_certmap-develUpgrade libsss_idmapUpgrade sssd-commonUpgrade sssd-libwbclientUpgrade sssd-common-pacUpgrade sssd-ipaUpgrade libsss_simpleifpUpgrade sssd-libwbclient-develUpgrade sssdUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade sssd-ldapUpgrade sssd-krb5Upgrade sssd-proxyUpgrade libsss_idmap-develUpgrade libsss_simpleifp-develUpgrade libsss_sudoUpgrade sssd-kcmUpgrade sssd-adUpgrade sssd-krb5-commonUpgrade libsss_certmapUpgrade sssd-winbind-idmapUpgrade python-libsss_nss_idmap | Aug 28, 2019 | Jun 26, 2018 |
| Debian | — | Upgrade sssd | Feb 19, 2019 | Jun 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sssd-dbusUpgrade sssd-krb5Upgrade libsss_autofsUpgrade libsss_nss_idmapUpgrade sssd-clientUpgrade sssd-commonUpgrade sssd-common-pacUpgrade sssd-libwbclientUpgrade libipa_hbacUpgrade python-sssUpgrade libsss_certmapUpgrade sssd-ldapUpgrade sssd-toolsUpgrade libsss_idmapUpgrade python-libipa_hbacUpgrade sssd-ipaUpgrade sssd-krb5-commonUpgrade python-sssdconfigUpgrade python-sss-murmurUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifpUpgrade libsss_sudoUpgrade sssd-adUpgrade sssd-proxyUpgrade sssd | Dec 31, 2018 | Jun 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-sssdconfigUpgrade libsss_sudoUpgrade sssdUpgrade python-libipa_hbacUpgrade python-sssUpgrade sssd-adUpgrade python-sss-murmurUpgrade sssd-krb5-commonUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade libsss_simpleifpUpgrade python-libsss_nss_idmapUpgrade sssd-ipaUpgrade sssd-dbusUpgrade libsss_idmapUpgrade sssd-commonUpgrade sssd-krb5Upgrade sssd-proxyUpgrade libsss_autofsUpgrade sssd-clientUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade libsss_certmap | Dec 11, 2018 | Jun 26, 2018 |
| Oracle_linux | — | Upgrade sssd-libwbclient-develUpgrade sssdUpgrade libsss_simpleifpUpgrade python-sss-murmurUpgrade libsss_certmap-develUpgrade libsss_autofsUpgrade libsss_certmapUpgrade sssd-krb5Upgrade sssd-clientUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade libipa_hbac-develUpgrade sssd-toolsUpgrade libsss_simpleifp-develUpgrade libsss_nss_idmapUpgrade libsss_nss_idmap-develUpgrade sssd-libwbclientUpgrade sssd-adUpgrade sssd-kcmUpgrade python-libipa_hbacUpgrade python-sssdconfigUpgrade sssd-winbind-idmapUpgrade sssd-dbusUpgrade sssd-krb5-commonUpgrade sssd-ipaUpgrade libsss_idmap-develUpgrade libsss_idmapUpgrade sssd-proxyUpgrade sssd-commonUpgrade sssd-polkit-rulesUpgrade libipa_hbacUpgrade libsss_sudoUpgrade python-libsss_nss_idmapUpgrade python-sss | Nov 6, 2018 | Jun 26, 2018 |
| Redhat_linux | — | Upgrade sssd-krb5Upgrade sssd-clientUpgrade sssd-ldapUpgrade libsss_certmapNo solution existsUpgrade sssd-toolsUpgrade libipa_hbac-develUpgrade libsss_certmap-develUpgrade sssd-debuginfoUpgrade sssd-libwbclient-develUpgrade libsss_autofsUpgrade sssd-dbusUpgrade libsss_nss_idmap-develUpgrade sssd-libwbclientUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade libsss_simpleifp-develUpgrade python-sssUpgrade libsss_sudoUpgrade sssd-polkit-rulesUpgrade python-sssdconfigUpgrade libsss_idmap-develUpgrade python-libipa_hbacUpgrade sssd-adUpgrade libsss_idmapUpgrade python-sss-murmurUpgrade sssd-ipaUpgrade sssd-krb5-commonUpgrade sssd-proxyUpgrade libsss_simpleifpUpgrade sssdUpgrade libipa_hbacUpgrade python-libsss_nss_idmapUpgrade sssd-commonUpgrade sssd-kcmUpgrade sssd-winbind-idmap | Oct 31, 2018 | Jun 26, 2018 |
| Suse | — | Upgrade libipa_hbac-develUpgrade libsss_sudoUpgrade python3-sssd-configUpgrade sssd-ipaUpgrade libnfsidmap-sssUpgrade python-sssd-configUpgrade libsss_simpleifp0Upgrade libsss_idmap-develUpgrade sssd-wbclientUpgrade libsss_certmap0Upgrade libsss_nss_idmap0Upgrade libsss_certmap-develUpgrade sssd-toolsUpgrade sssd-wbclient-develUpgrade sssd-32bitUpgrade libsss_simpleifp-develUpgrade sssd-krb5Upgrade sssd-commonUpgrade sssd-ldapUpgrade python3-ipa_hbacUpgrade python3-sss-murmurUpgrade libipa_hbac0Upgrade libsss_nss_idmap-develUpgrade sssd-dbusUpgrade sssd-krb5-commonUpgrade sssd-winbind-idmapUpgrade sssd-adUpgrade sssdUpgrade sssd-proxyUpgrade libsss_idmap0Upgrade python3-sss_nss_idmap | Aug 10, 2018 | Jun 26, 2018 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jun 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub