sssd-idp vulnerabilities (TuxCare)
11 vulnerabilities.
sssd-idpTuxCareSssd: sssd: denial of service via race condition in autofs responder4.7 Mediumsssd-idpTuxCareSssd: sssd: fail-open in ldap ppolicy access check allows continued authorization5.4 Mediumsssd-idpTuxCareSssd: sssd: denial of service in nss responder via crafted zero-length requests4.0 Mediumsssd-idpTuxCareSssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v15.5 Mediumsssd-idpTuxCareSssd: sssd: nss responder uninitialized heap disclosure in initgroups reply3.3 Lowsssd-idpTuxCareSssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr5.5 Mediumsssd-idpTuxCareSssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass8.0 Highsssd-idpTuxCareSssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation8.8 Highsssd-idpTuxCareSssd: use-after-free crash in sssd' 'sssd_pam' process6.4 Mediumsssd-idpTuxCareSssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems8.8 Highsssd-idpTuxCareSssd: race condition during authorization leads to gpo policies functioning inconsistently7.1 High