CVE-2018-10852

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can se...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD before 1.16.3.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2018-10852 sssd Corrigé dans: 1.16.3-1
Ubuntu UBUNTU-CVE-2018-10852 sssd

Références

advisory securityfocus.com
advisory access.redhat.com
advisory lists.debian.org
report bugzilla.redhat.com