Sssd vulnerabilitiesRanked by how likely they are to be used.
Sssd is made by Fedoraproject. We track 17 published vulnerabilities in it, across 112 versions. None of them is on the list of flaws known to be exploited today. If you run Sssd, keep it on a version the vendor still supports.
We keep watching the known-exploited list.
Which Sssd vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Sssd's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Sssd flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 3.7%CVE-2015-5292Medium
Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote authenticated users to cause a denial of...
- 3.3%CVE-2013-0220Medium
The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security...
- 2.6%CVE-2021-3621High
A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands.
- 2.2%CVE-2013-0287Medium
The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote...
- 2.0%CVE-2010-2940Medium
The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication...
- 1.6%CVE-2012-3462High
A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's...
- 1.5%CVE-2018-10852High
The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use...
- 1.5%CVE-2017-12173High
It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection.
- 1.1%CVE-2018-16838Medium
A flaw was found in sssd Group Policy Objects implementation.
- 0.9%CVE-2022-4254High
sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
Running Sssd? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote authenticated users to cause a denial of service (memory consumption) via a large number of logins that trigger parsing of PAC blobs during Kerberos authentication.
- Matched to
- Sssd on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 17 published vulnerabilities listed under the name Sssd, across 112 versions.
None of Sssd's vulnerabilities is on the list of flaws known to be exploited today.
Create a EdgeProtect account and track Sssd. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.