sssd-kcm vulnerabilities (TuxCare)
15 vulnerabilities.
sssd-kcmTuxCaresssd: Fix of 7 CVEsNo scoresssd-kcmTuxCaresssd: Fix of 2 CVEsNo scoresssd-kcmTuxCareSssd: sssd: denial of service via race condition in autofs responder4.7 Mediumsssd-kcmTuxCareUpdate of sssdNo scoresssd-kcmTuxCareSssd: sssd: fail-open in ldap ppolicy access check allows continued authorization5.4 Mediumsssd-kcmTuxCareSssd: sssd: denial of service in nss responder via crafted zero-length requests4.0 Mediumsssd-kcmTuxCareUpdate of sssdNo scoresssd-kcmTuxCareSssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v15.5 Mediumsssd-kcmTuxCareSssd: sssd: nss responder uninitialized heap disclosure in initgroups reply3.3 Lowsssd-kcmTuxCareSssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr5.5 Mediumsssd-kcmTuxCareSssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass8.0 Highsssd-kcmTuxCareSssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation8.8 Highsssd-kcmTuxCareSssd: use-after-free crash in sssd' 'sssd_pam' process6.4 Mediumsssd-kcmTuxCareSssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems8.8 Highsssd-kcmTuxCareSssd: race condition during authorization leads to gpo policies functioning inconsistently7.1 High