CVE-2018-10852

CVE-2018-10852 describes an information-leak vulnerability in the sssd-sudo responder. The UNIX pipe used by sudo to contact SSSD and read available sudo rules from SSSD has overly broad permissions, allowing a user who can communicate over the same raw protocol to read the sudo rules for any use...

CVE-2017-12173

CVE-2017-12173 affects sssd: the sysdb_search_user_by_upn_res() function did not sanitize requests when querying the local cache, with versions before 1.16.0 vulnerable to injection. In centralized login environments, if a password hash is cached for a user, an authenticated attacker could retrie...

CVE-2019-3811

CVE-2019-3811 affects sssd: if a user has no home directory, sssd returns '/' instead of '', potentially allowing access beyond the user’s home dir. Affected are all versions prior to 2.1. Public advisories (e.g., Debian LTS DLA-3436-1) indicate a patch is available in newer sssd packages; remedi...

CVE-2023-3758

CVE-2023-3758 affects the System Security Services Daemon (SSSD). A race condition causes GPO policy to be inconsistently applied for authenticated users, leading to improper authorization (granting or denying access). Publicly referenced advisories confirm this issue across multiple distribution...