libsss_sudo vulnerabilities (Red Hat)
22 vulnerabilities.
-
libsss_sudoRed Hat Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation 7.5 High -
libsss_sudoRed Hat Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass 8.0 High -
libsss_sudoRed Hat Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation 8.8 High -
libsss_sudoRed Hat Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 8.8 High -
libsss_sudoRed Hat Sssd: race condition during authorization leads to gpo policies functioning inconsistently 7.1 High -
libsss_sudoRed Hat sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters 8.8 High -
libsss_sudoRed Hat A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via... 8.8 High -
libsss_sudoRed Hat A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by... 5.4 Medium -
libsss_sudoRed Hat A vulnerability was found in sssd. If a user was configured with no home directory set, sssd... 4.1 Medium -
libsss_sudoRed Hat The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too... 3.8 Low -
libsss_sudoRed Hat It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize... 4.3 Medium -
libsss_sudoRed Hat The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before... 7.5 High -
libsss_sudoRed Hat Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB... 5.9 Medium -
libsss_sudoRed Hat The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before... 5.9 Medium -
libsss_sudoRed Hat Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509... 7.4 High -
libsss_sudoRed Hat The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x... 5.9 Medium -
libsss_sudoRed Hat The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4... 6.3 Medium -
libsss_sudoRed Hat The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8,... 5.9 Medium -
libsss_sudoRed Hat Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly... 5.9 Medium -
libsss_sudoRed Hat The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when... 4.9 Medium -
libsss_sudoRed Hat The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in... 5.0 Medium -
libsss_sudoRed Hat System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3)... 3.7 Low