Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:3270

Опубликовано: 14 июн. 2024
Источник: rocky
Оценка: Moderate

Описание

Moderate: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
libipa_hbacaarch643.el8_10libipa_hbac-2.9.4-3.el8_10.aarch64.rpm
libsss_autofsaarch643.el8_10libsss_autofs-2.9.4-3.el8_10.aarch64.rpm
libsss_certmapaarch643.el8_10libsss_certmap-2.9.4-3.el8_10.aarch64.rpm
libsss_idmapaarch643.el8_10libsss_idmap-2.9.4-3.el8_10.aarch64.rpm
libsss_nss_idmapaarch643.el8_10libsss_nss_idmap-2.9.4-3.el8_10.aarch64.rpm
libsss_simpleifpaarch643.el8_10libsss_simpleifp-2.9.4-3.el8_10.aarch64.rpm
libsss_sudoaarch643.el8_10libsss_sudo-2.9.4-3.el8_10.aarch64.rpm
python3-libipa_hbacaarch643.el8_10python3-libipa_hbac-2.9.4-3.el8_10.aarch64.rpm
python3-libsss_nss_idmapaarch643.el8_10python3-libsss_nss_idmap-2.9.4-3.el8_10.aarch64.rpm
python3-sssaarch643.el8_10python3-sss-2.9.4-3.el8_10.aarch64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 7.1
ubuntu
больше 2 лет назад

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

CVSS3: 7.1
redhat
больше 2 лет назад

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

CVSS3: 7.1
nvd
больше 2 лет назад

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

CVSS3: 7.1
debian
больше 2 лет назад

A race condition flaw was found in sssd where the GPO policy is not co ...

suse-cvrf
около 2 лет назад

Security update for sssd