sssd vulnerabilities (SUSE)
40 vulnerabilities.
-
sssdSUSE Sssd: sssd: denial of service via race condition in autofs responder 4.7 Medium -
sssdSUSE Sssd: sssd: denial of service via undersized packet parsing in nss responder 5.5 Medium -
sssdSUSE Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder 4.7 Medium -
sssdSUSE Sssd: sssd: denial of service via missing sid extension in certificate mapping 5.9 Medium -
sssdSUSE Sssd: sssd: denial of service via packet length underflow in autofs responder 5.5 Medium -
sssdSUSE Sssd: sssd: access control bypass via premature ldap access rule evaluation 6.8 Medium -
sssdSUSE Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin 5.8 Medium -
sssdSUSE Sssd: sssd: access control bypass via improper ldap shadow expiration check 5.4 Medium -
sssdSUSE Sssd: sssd: denial of service via memory exhaustion in autofs responder 5.5 Medium -
sssdSUSE Sssd: sssd: denial of service via out-of-bounds read in autofs responder 3.3 Low -
sssdSUSE Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization 5.4 Medium -
sssdSUSE Sssd: sssd: denial of service in nss responder via crafted zero-length requests 4.0 Medium -
sssdSUSE Sssd: sssd: local denial of service due to null pointer dereference in pam responder 5.5 Medium -
sssdSUSE Sssd: sssd: denial of service via malformed pam v1 requests 4.0 Medium -
sssdSUSE Sssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`) 4.0 Medium -
sssdSUSE Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1 5.5 Medium -
sssdSUSE Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply 3.3 Low -
sssdSUSE Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr 5.5 Medium -
sssdSUSE Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass 8.0 High -
sssdSUSE Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation 8.8 High -
sssdSUSE Sssd: use-after-free crash in sssd' 'sssd_pam' process 6.4 Medium -
sssdSUSE Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 8.8 High -
sssdSUSE Sssd: race condition during authorization leads to gpo policies functioning inconsistently 7.1 High -
sssdSUSE sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters 8.8 High -
sssdSUSE A flaw was found in the way Samba handled file/directory metadata. This flaw allows an... 6.8 Medium -
sssdSUSE The Samba AD DC includes checks when adding service principals names (SPNs) to an account to... 8.8 High -
sssdSUSE The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced... 8.8 High -
sssdSUSE All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink... 4.3 Medium -
sssdSUSE All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS... 2.5 Low -
sssdSUSE Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC... 8.8 High -
sssdSUSE A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via... 8.8 High -
sssdSUSE ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... 7.5 High -
sssdSUSE A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can... 7.5 High -
sssdSUSE A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to... 7.5 High -
sssdSUSE Moderate: p11-kit security, bug fix, and enhancement update 7.5 High -
sssdSUSE A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by... 5.4 Medium -
sssdSUSE A vulnerability was found in sssd. If a user was configured with no home directory set, sssd... 4.1 Medium -
sssdSUSE The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too... 3.8 Low -
sssdSUSE It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize... 4.3 Medium -
sssdSUSE The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership... 3.3 Low