sssd vulnerabilities (Debian)
54 vulnerabilities.
-
sssdDebian Sssd: sssd-kcm: local denial of service via excessive memory preallocation 5.5 Medium -
sssdDebian Sssd: sssd: denial of service via race condition in autofs responder 4.7 Medium -
sssdDebian Sssd: sssd: denial of service via incomplete identity provider authentication requests 6.2 Medium -
sssdDebian Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation 6.8 Medium -
sssdDebian Sssd: sssd: information disclosure via query injection in entra id lookups 5.3 Medium -
sssdDebian Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion 4.7 Medium -
sssdDebian Sssd: sssd: denial of service via crafted passkey kerberos authentication request 6.2 Medium -
sssdDebian Sssd: sssd: denial of service via undersized packet parsing in nss responder 5.5 Medium -
sssdDebian Sssd: sssd: denial of service via out-of-bounds read in pam responder 5.5 Medium -
sssdDebian Sssd: sssd: denial of service via unbounded negative cache growth 5.5 Medium -
sssdDebian A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names... 4.4 Medium -
sssdDebian Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder 4.7 Medium -
sssdDebian Sssd: sssd: denial of service via missing sid extension in certificate mapping 5.9 Medium -
sssdDebian Sssd: sssd: denial of service via packet length underflow in autofs responder 5.5 Medium -
sssdDebian Sssd: sssd: access control bypass via premature ldap access rule evaluation 6.8 Medium -
sssdDebian Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin 5.8 Medium -
sssdDebian Sssd: sssd: denial of service via memory exhaustion in kcm responder 5.5 Medium -
sssdDebian Sssd: sssd: denial of service via use-after-free in kcm ticket renewal 4.7 Medium -
sssdDebian Sssd: sssd: access control bypass via improper ldap shadow expiration check 5.4 Medium -
sssdDebian Sssd: sssd: denial of service via unprivileged autofs cache invalidation 5.5 Medium -
sssdDebian Sssd: sssd: denial of service via memory exhaustion in autofs responder 5.5 Medium -
sssdDebian Sssd: sssd: denial of service via out-of-bounds read in autofs responder 3.3 Low -
sssdDebian Sssd: sssd: denial of service via out-of-bounds read during passkey parsing 5.5 Medium -
sssdDebian Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization 5.4 Medium -
sssdDebian Sssd: sssd: denial of service in nss responder via crafted zero-length requests 4.0 Medium -
sssdDebian Sssd: sssd: local denial of service due to null pointer dereference in pam responder 5.5 Medium -
sssdDebian Sssd: sssd: denial of service via malformed pam v1 requests 4.0 Medium -
sssdDebian Sssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`) 4.0 Medium -
sssdDebian Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation 7.5 High -
sssdDebian Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1 5.5 Medium -
sssdDebian Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply 3.3 Low -
sssdDebian Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr 5.5 Medium -
sssdDebian Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass 8.0 High -
sssdDebian Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation 8.8 High -
sssdDebian Sssd: use-after-free crash in sssd' 'sssd_pam' process 6.4 Medium -
sssdDebian Sssd: out-of-bounds read in the sssd 5.5 Medium -
sssdDebian Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 8.8 High -
sssdDebian Sssd: race condition during authorization leads to gpo policies functioning inconsistently 7.1 High -
sssdDebian sssd - regression update No score -
sssdDebian sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters 8.8 High -
sssdDebian A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via... 8.8 High -
sssdDebian A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the... 8.8 High -
sssdDebian A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by... 5.4 Medium -
sssdDebian A vulnerability was found in sssd. If a user was configured with no home directory set, sssd... 4.1 Medium -
sssdDebian sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe... 2.5 Low -
sssdDebian The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too... 3.8 Low -
sssdDebian It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize... 4.3 Medium -
sssdDebian Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in... 6.8 Medium -
sssdDebian The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership... 3.3 Low -
sssdDebian The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in... 5.0 Medium - Show olderLoading…