Lucene search
PRIOn knowledge basePRION:CVE-2018-10852HistoryJun 26, 2018 - 2:29 p.m.
Code injection
2018-06-2614:29:00
PRIOn knowledge base
www.prio-n.com
7
The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD before 1.16.3.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 8.0 | |
| sssd | lt | 1.16.3 | |
| enterprise_linux_desktop | eq | 7.0 | |
| enterprise_linux_server | eq | 7.0 | |
| enterprise_linux_workstation | eq | 7.0 |
Related
suse
suse
Security update for sssd (moderate)
2018-08-10 03:11:29
Security update for sssd (moderate)
2019-01-14 00:00:00
oraclelinux
oraclelinux
sssd security, bug fix, and enhancement update
2018-11-05 00:00:00
nessus
nessus
Scientific Linux Security Update : sssd on SL7.x x86_64 (20181030)
2018-11-27 00:00:00
Oracle Linux 7 : sssd (ELSA-2018-3158)
2018-11-07 00:00:00
openSUSE Security Update : sssd (openSUSE-2019-574)
2019-03-27 00:00:00
openvas
openvas
openSUSE: Security Advisory for sssd (openSUSE-SU-2019:0051-1)
2019-01-14 00:00:00
Mageia: Security Advisory (MGASA-2018-0350)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2144-1)
2021-06-09 00:00:00
osv
osv
sssd - security update
2018-07-16 00:00:00
sssd vulnerabilities
2021-09-08 11:40:23
nvd
nvd
CVE-2018-10852
2018-06-26 14:29:02
centos
centos
redhatcve
redhatcve
CVE-2018-10852
2018-06-26 03:18:41
debiancve
debiancve
CVE-2018-10852
2018-06-26 14:29:02
ubuntucve
ubuntucve
CVE-2018-10852
2018-06-26 00:00:00
debian
debian
[SECURITY] [DLA 1429-1] sssd security update
2018-07-16 10:09:58
cve
cve
CVE-2018-10852
2018-06-26 14:29:02
veracode
veracode
Information Disclosure
2019-01-15 09:26:43
mageia
mageia
Updated sssd packages fix security vulnerability
2018-08-24 02:35:07
cvelist
cvelist
CVE-2018-10852
2018-06-26 14:00:00
redhat
redhat
(RHSA-2018:3158) Low: sssd security, bug fix, and enhancement update
2018-10-30 04:24:36
ubuntu
ubuntu
SSSD vulnerabilities
2021-09-08 00:00:00