sssd vulnerabilities (openSUSE)
30 vulnerabilities.
-
sssdopenSUSE Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation 7.5 High -
sssdopenSUSE Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1 5.5 Medium -
sssdopenSUSE Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply 3.3 Low -
sssdopenSUSE Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr 5.5 Medium -
sssdopenSUSE Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass 8.0 High -
sssdopenSUSE Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation 8.8 High -
sssdopenSUSE Sssd: use-after-free crash in sssd' 'sssd_pam' process 6.4 Medium -
sssdopenSUSE Sssd: out-of-bounds read in the sssd 5.5 Medium -
sssdopenSUSE Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 8.8 High -
sssdopenSUSE Sssd: race condition during authorization leads to gpo policies functioning inconsistently 7.1 High -
sssdopenSUSE sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters 8.8 High -
sssdopenSUSE A flaw was found in the way Samba handled file/directory metadata. This flaw allows an... 6.8 Medium -
sssdopenSUSE The Samba AD DC includes checks when adding service principals names (SPNs) to an account to... 8.8 High -
sssdopenSUSE The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced... 8.8 High -
sssdopenSUSE All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink... 4.3 Medium -
sssdopenSUSE All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS... 2.5 Low -
sssdopenSUSE A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via... 8.8 High -
sssdopenSUSE ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... 7.5 High -
sssdopenSUSE A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can... 7.5 High -
sssdopenSUSE A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to... 7.5 High -
sssdopenSUSE A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by... 5.4 Medium -
sssdopenSUSE A vulnerability was found in sssd. If a user was configured with no home directory set, sssd... 4.1 Medium -
sssdopenSUSE The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too... 3.8 Low -
sssdopenSUSE It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize... 4.3 Medium -
sssdopenSUSE The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership... 3.3 Low -
sssdopenSUSE The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when... 4.9 Medium -
sssdopenSUSE The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in... 5.0 Medium -
sssdopenSUSE System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3)... 3.7 Low -
sssdopenSUSE The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services... 3.7 Low -
sssdopenSUSE The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD... 2.1 Low