sssd vulnerabilities (Ubuntu)
48 vulnerabilities.
-
sssdUbuntu Sssd: sssd-kcm: local denial of service via excessive memory preallocation 5.5 Medium -
sssdUbuntu Sssd: sssd: denial of service via race condition in autofs responder 4.7 Medium -
sssdUbuntu Sssd: sssd: denial of service via incomplete identity provider authentication requests 6.2 Medium -
sssdUbuntu Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation 6.8 Medium -
sssdUbuntu Sssd: sssd: information disclosure via query injection in entra id lookups 5.3 Medium -
sssdUbuntu Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion 4.7 Medium -
sssdUbuntu Sssd: sssd: denial of service via crafted passkey kerberos authentication request 6.2 Medium -
sssdUbuntu Sssd: sssd: denial of service via undersized packet parsing in nss responder 5.5 Medium -
sssdUbuntu Sssd: sssd: denial of service via out-of-bounds read in pam responder 5.5 Medium -
sssdUbuntu Sssd: sssd: denial of service via unbounded negative cache growth 5.5 Medium -
sssdUbuntu Sssd: sssd: information disclosure via odata injection in entra id lookups 4.4 Medium -
sssdUbuntu Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder 4.7 Medium -
sssdUbuntu Sssd: sssd: denial of service via missing sid extension in certificate mapping 5.9 Medium -
sssdUbuntu Sssd: sssd: denial of service via packet length underflow in autofs responder 5.5 Medium -
sssdUbuntu Sssd: sssd: access control bypass via premature ldap access rule evaluation 6.8 Medium -
sssdUbuntu Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin 5.8 Medium -
sssdUbuntu Sssd: sssd: denial of service via memory exhaustion in kcm responder 5.5 Medium -
sssdUbuntu Sssd: sssd: denial of service via use-after-free in kcm ticket renewal 4.7 Medium -
sssdUbuntu Sssd: sssd: access control bypass via improper ldap shadow expiration check 5.4 Medium -
sssdUbuntu Sssd: sssd: denial of service via unprivileged autofs cache invalidation 5.5 Medium -
sssdUbuntu Sssd: sssd: denial of service via memory exhaustion in autofs responder 5.5 Medium -
sssdUbuntu Sssd: sssd: denial of service via out-of-bounds read in autofs responder 3.3 Low -
sssdUbuntu Sssd: sssd: denial of service via out-of-bounds read during passkey parsing 5.5 Medium -
sssdUbuntu Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization 5.4 Medium -
sssdUbuntu Sssd: sssd: denial of service in nss responder via crafted zero-length requests 4.0 Medium -
sssdUbuntu Sssd: sssd: local denial of service due to null pointer dereference in pam responder 5.5 Medium -
sssdUbuntu Sssd: sssd: denial of service via malformed pam v1 requests 4.0 Medium -
sssdUbuntu Sssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`) 4.0 Medium -
sssdUbuntu Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation 7.5 High -
sssdUbuntu Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1 5.5 Medium -
sssdUbuntu Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply 3.3 Low -
sssdUbuntu Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr 5.5 Medium -
sssdUbuntu Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass 8.0 High -
sssdUbuntu Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation 8.8 High -
sssdUbuntu Sssd: use-after-free crash in sssd' 'sssd_pam' process 6.4 Medium -
sssdUbuntu Sssd: out-of-bounds read in the sssd 5.5 Medium -
sssdUbuntu Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 8.8 High -
sssdUbuntu Sssd: race condition during authorization leads to gpo policies functioning inconsistently 7.1 High -
sssdUbuntu Network authentication attack via pam_krb5 9.8 Critical -
sssdUbuntu sssd regression No score -
sssdUbuntu sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters 8.8 High -
sssdUbuntu sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU... 7.5 High -
sssdUbuntu A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via... 8.8 High -
sssdUbuntu A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by... 5.4 Medium -
sssdUbuntu A vulnerability was found in sssd. If a user was configured with no home directory set, sssd... 4.1 Medium -
sssdUbuntu sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe... 2.5 Low -
sssdUbuntu The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too... 3.8 Low -
sssdUbuntu It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize... 4.3 Medium