sssd-krb5 vulnerabilities (TuxCare)
17 vulnerabilities.
sssd-krb5TuxCaresssd: Fix of 7 CVEsNo scoresssd-krb5TuxCaresssd: Fix of 2 CVEsNo scoresssd-krb5TuxCareSssd: sssd: denial of service via race condition in autofs responder4.7 Mediumsssd-krb5TuxCareUpdate of sssdNo scoresssd-krb5TuxCareSssd: sssd: fail-open in ldap ppolicy access check allows continued authorization5.4 Mediumsssd-krb5TuxCareSssd: sssd: denial of service in nss responder via crafted zero-length requests4.0 Mediumsssd-krb5TuxCareUpdate of sssdNo scoresssd-krb5TuxCareSssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v15.5 Mediumsssd-krb5TuxCareSssd: sssd: nss responder uninitialized heap disclosure in initgroups reply3.3 Lowsssd-krb5TuxCareSssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr5.5 Mediumsssd-krb5TuxCareSssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass8.0 Highsssd-krb5TuxCareSssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation8.8 Highsssd-krb5TuxCareSssd: use-after-free crash in sssd' 'sssd_pam' process6.4 Mediumsssd-krb5TuxCareSssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems8.8 Highsssd-krb5TuxCareSssd: race condition during authorization leads to gpo policies functioning inconsistently7.1 Highsssd-krb5TuxCareA vulnerability was found in sssd. If a user was configured with no home directory set, sssd...4.1 Mediumsssd-krb5TuxCareThe UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too...3.8 Low