Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2019-0542-1.NASL
HistoryMar 06, 2019 - 12:00 a.m.

SUSE SLED15 / SLES15 Security Update : sssd (SUSE-SU-2019:0542-1)

2019-03-0600:00:00
This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
14

2.7 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:N/I:N/A:P

5.2 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%

JSON

This update for sssd fixes the following issues :

Security vulnerability addresed :

CVE-2019-3811: Fix fallback_homedir returning ‘/’ for empty home directories (bsc#1121759)

Other bug fixes and changes: Install logrotate configuration (bsc#1004220)

Align systemd service file with upstream, run interactive and change service type to notify (bsc#1120852)

Fix sssd not starting in foreground mode (bsc#1125277)

Strip whitespaces in netgroup triples (bsc#1087320)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2019:0542-1.
# The text itself is copyright (C) SUSE.
#

include('compat.inc');

if (description)
{
  script_id(122645);
  script_version("1.5");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/06/17");

  script_cve_id("CVE-2019-3811");

  script_name(english:"SUSE SLED15 / SLES15 Security Update : sssd (SUSE-SU-2019:0542-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote SUSE host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"This update for sssd fixes the following issues :

Security vulnerability addresed :

CVE-2019-3811: Fix fallback_homedir returning '/' for empty home
directories (bsc#1121759)

Other bug fixes and changes: Install logrotate configuration
(bsc#1004220)

Align systemd service file with upstream, run interactive and change
service type to notify (bsc#1120852)

Fix sssd not starting in foreground mode (bsc#1125277)

Strip whitespaces in netgroup triples (bsc#1087320)

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1004220");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1087320");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1120852");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1121759");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1125277");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-3811/");
  # https://www.suse.com/support/update/announcement/2019/suse-su-20190542-1/
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a259f816");
  script_set_attribute(attribute:"solution", value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE Linux Enterprise Module for Open Buildservice Development Tools
15:zypper in -t patch
SUSE-SLE-Module-Development-Tools-OBS-15-2019-542=1

SUSE Linux Enterprise Module for Basesystem 15:zypper in -t patch
SUSE-SLE-Module-Basesystem-15-2019-542=1");
  script_set_cvss_base_vector("CVSS2#AV:A/AC:L/Au:S/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-3811");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/01/15");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/03/05");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/03/06");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libipa_hbac-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libipa_hbac0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libipa_hbac0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libnfsidmap-sss");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libnfsidmap-sss-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsss_certmap-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsss_certmap0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsss_certmap0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsss_idmap-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsss_idmap0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsss_idmap0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsss_nss_idmap-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsss_nss_idmap0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsss_nss_idmap0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsss_simpleifp-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsss_simpleifp0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsss_simpleifp0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-ipa_hbac");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-ipa_hbac-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-sss-murmur");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-sss-murmur-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-sss_nss_idmap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-sss_nss_idmap-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-sssd-config");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-sssd-config-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-ad");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-ad-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-dbus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-dbus-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-ipa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-ipa-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-krb5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-krb5-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-krb5-common-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-krb5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-ldap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-ldap-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-proxy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-proxy-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-tools-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-wbclient");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-wbclient-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-wbclient-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-winbind-idmap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:sssd-winbind-idmap-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:15");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED15|SLES15)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED15 / SLES15", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES15" && (! preg(pattern:"^(0)$", string:sp))) audit(AUDIT_OS_NOT, "SLES15 SP0", os_ver + " SP" + sp);
if (os_ver == "SLED15" && (! preg(pattern:"^(0)$", string:sp))) audit(AUDIT_OS_NOT, "SLED15 SP0", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES15", sp:"0", cpu:"x86_64", reference:"sssd-32bit-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", cpu:"x86_64", reference:"sssd-32bit-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libipa_hbac-devel-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libipa_hbac0-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libipa_hbac0-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libnfsidmap-sss-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libnfsidmap-sss-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libsss_certmap-devel-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libsss_certmap0-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libsss_certmap0-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libsss_idmap-devel-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libsss_idmap0-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libsss_idmap0-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libsss_nss_idmap-devel-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libsss_nss_idmap0-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libsss_nss_idmap0-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libsss_simpleifp-devel-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libsss_simpleifp0-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libsss_simpleifp0-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-ipa_hbac-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-ipa_hbac-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-sss-murmur-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-sss-murmur-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-sss_nss_idmap-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-sss_nss_idmap-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-sssd-config-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-sssd-config-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-ad-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-ad-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-dbus-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-dbus-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-debugsource-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-ipa-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-ipa-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-krb5-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-krb5-common-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-krb5-common-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-krb5-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-ldap-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-ldap-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-proxy-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-proxy-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-tools-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-tools-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-wbclient-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-wbclient-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-wbclient-devel-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-winbind-idmap-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"sssd-winbind-idmap-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", cpu:"x86_64", reference:"sssd-32bit-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", cpu:"x86_64", reference:"sssd-32bit-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libipa_hbac-devel-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libipa_hbac0-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libipa_hbac0-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libnfsidmap-sss-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libnfsidmap-sss-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libsss_certmap-devel-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libsss_certmap0-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libsss_certmap0-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libsss_idmap-devel-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libsss_idmap0-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libsss_idmap0-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libsss_nss_idmap-devel-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libsss_nss_idmap0-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libsss_nss_idmap0-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libsss_simpleifp-devel-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libsss_simpleifp0-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libsss_simpleifp0-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-ipa_hbac-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-ipa_hbac-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-sss-murmur-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-sss-murmur-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-sss_nss_idmap-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-sss_nss_idmap-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-sssd-config-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-sssd-config-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-ad-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-ad-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-dbus-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-dbus-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-debugsource-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-ipa-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-ipa-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-krb5-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-krb5-common-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-krb5-common-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-krb5-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-ldap-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-ldap-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-proxy-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-proxy-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-tools-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-tools-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-wbclient-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-wbclient-debuginfo-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-wbclient-devel-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-winbind-idmap-1.16.1-3.15.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"sssd-winbind-idmap-debuginfo-1.16.1-3.15.1")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());
  else security_note(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "sssd");
}
VendorProductVersionCPE
novellsuse_linuxlibsss_nss_idmap0p-cpe:/a:novell:suse_linux:libsss_nss_idmap0
novellsuse_linuxsssd-ldap-debuginfop-cpe:/a:novell:suse_linux:sssd-ldap-debuginfo
novellsuse_linuxsssd-proxyp-cpe:/a:novell:suse_linux:sssd-proxy
novellsuse_linuxpython3-sssd-config-debuginfop-cpe:/a:novell:suse_linux:python3-sssd-config-debuginfo
novellsuse_linuxlibsss_idmap-develp-cpe:/a:novell:suse_linux:libsss_idmap-devel
novellsuse_linuxlibsss_certmap0-debuginfop-cpe:/a:novell:suse_linux:libsss_certmap0-debuginfo
novellsuse_linuxsssd-proxy-debuginfop-cpe:/a:novell:suse_linux:sssd-proxy-debuginfo
novellsuse_linuxlibnfsidmap-sssp-cpe:/a:novell:suse_linux:libnfsidmap-sss
novellsuse_linuxsssd-tools-debuginfop-cpe:/a:novell:suse_linux:sssd-tools-debuginfo
novellsuse_linuxsssd-ldapp-cpe:/a:novell:suse_linux:sssd-ldap
Rows per page:
1-10 of 511

Related

nessus 23
openvas 15
veracode 1
prion 1
debiancve 1
redhatcve 1
osv 3
nvd 1
ubuntucve 1
cve 1
debian 2
cvelist 1
suse 2
oraclelinux 1
rosalinux 1
amazon 2
mageia 1
centos 1
redhat 1
ubuntu 1
nessus
nessus
EulerOS 2.0 SP2 : sssd (EulerOS-SA-2019-1754)
2019-07-22 00:00:00
openSUSE Security Update : sssd (openSUSE-2019-344)
2019-03-19 00:00:00
Debian DLA-1635-1 : sssd security update
2019-01-18 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for sssd (EulerOS-SA-2019-1754)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for sssd (EulerOS-SA-2019-1660)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:0542-1)
2021-06-09 00:00:00
veracode
veracode
Unauthorised Access
2019-08-08 00:07:55
prion
prion
Design/Logic Flaw
2019-01-15 15:29:00
debiancve
debiancve
CVE-2019-3811
2019-01-15 15:29:00
redhatcve
redhatcve
CVE-2019-3811
2019-01-11 18:26:42
osv
osv
sssd - security update
2019-01-17 00:00:00
sssd vulnerabilities
2021-09-08 11:40:23
sssd - security update
2023-05-29 00:00:00
nvd
nvd
CVE-2019-3811
2019-01-15 15:29:00
ubuntucve
ubuntucve
CVE-2019-3811
2019-01-15 00:00:00
cve
cve
CVE-2019-3811
2019-01-15 15:29:00
debian
debian
[SECURITY] [DLA 1635-1] sssd security update
2019-01-17 12:34:29
[SECURITY] [DLA 3436-1] sssd security update
2023-05-29 13:43:53
cvelist
cvelist
CVE-2019-3811
2019-01-15 15:00:00
suse
suse
Security update for sssd (moderate)
2019-03-18 00:00:00
Recommended update for adcli, sssd (moderate)
2019-04-08 00:00:00
oraclelinux
oraclelinux
sssd security, bug fix, and enhancement update
2019-08-13 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1977
2021-07-02 18:10:53
amazon
amazon
Medium: sssd
2019-10-08 21:07:00
Medium: sssd
2019-10-28 17:45:00
mageia
mageia
Updated ldb packages fix security vulnerability
2019-05-08 00:38:09
centos
centos
libipa_hbac, libsss_autofs, libsss_certmap, libsss_idmap, libsss_nss_idmap, libsss_simpleifp, libsss_sudo, python, sssd security update
2019-08-30 04:23:37
redhat
redhat
(RHSA-2019:2177) Moderate: sssd security, bug fix, and enhancement update
2019-08-06 08:10:08
ubuntu
ubuntu
SSSD vulnerabilities
2021-09-08 00:00:00

2.7 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:N/I:N/A:P

5.2 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%

JSON
Related for SUSE_SU-2019-0542-1.NASL
nessus23openvas15veracode1prion1debiancve1redhatcve1osv3nvd1ubuntucve1cve1debian2cvelist1suse2oraclelinux1rosalinux1amazon2mageia1centos1redhat1ubuntu1