Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:3270

Опубликовано: 14 июн. 2024
Источник: rocky
Оценка: Moderate

Описание

Moderate: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
libipa_hbacx86_643.el8_10libipa_hbac-2.9.4-3.el8_10.x86_64.rpm
libsss_autofsx86_643.el8_10libsss_autofs-2.9.4-3.el8_10.x86_64.rpm
libsss_certmapx86_643.el8_10libsss_certmap-2.9.4-3.el8_10.x86_64.rpm
libsss_idmapx86_643.el8_10libsss_idmap-2.9.4-3.el8_10.x86_64.rpm
libsss_nss_idmapx86_643.el8_10libsss_nss_idmap-2.9.4-3.el8_10.x86_64.rpm
libsss_simpleifpx86_643.el8_10libsss_simpleifp-2.9.4-3.el8_10.x86_64.rpm
libsss_sudox86_643.el8_10libsss_sudo-2.9.4-3.el8_10.x86_64.rpm
python3-libipa_hbacx86_643.el8_10python3-libipa_hbac-2.9.4-3.el8_10.x86_64.rpm
python3-libsss_nss_idmapx86_643.el8_10python3-libsss_nss_idmap-2.9.4-3.el8_10.x86_64.rpm
python3-sssx86_643.el8_10python3-sss-2.9.4-3.el8_10.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 7.1
ubuntu
около 1 года назад

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

CVSS3: 7.1
redhat
около 1 года назад

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

CVSS3: 7.1
nvd
около 1 года назад

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

CVSS3: 7.1
debian
около 1 года назад

A race condition flaw was found in sssd where the GPO policy is not co ...

suse-cvrf
около 1 года назад

Security update for sssd