The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3158 advisory.

    The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote     directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the     Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to     connect to multiple different account sources.

    The following packages have been upgraded to a later upstream version: sssd (1.16.2). (BZ#1558498)

    Security Fix(es):

    * sssd: information leak from the sssd-sudo responder (CVE-2018-10852)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    This issue was discovered by Jakub Hrozek (Red Hat).

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD utilizes too broad of a set of permissions. Any user who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user.(CVE-2018-10852)

According to the version of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - sssd: information leak from the sssd-sudo     responder.(CVE-2018-10852)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for sssd fixes the following security issue :

  - CVE-2018-10852: Set stricter permissions on     /var/lib/sss/pipes/sudo to prevent the disclosure of     sudo rules for arbitrary users (bsc#1098377).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for sssd provides the following fixes :

This security issue was fixed :

CVE-2018-10852: Set stricter permissions on /var/lib/sss/pipes/sudo to prevent the disclosure of sudo rules for arbitrary users (bsc#1098377)

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5067-1 advisory.

    Jakub Hrozek discovered that SSSD incorrectly handled file permissions. A local attacker could possibly     use this issue to read the sudo rules available for any user. This issue only affected Ubuntu 18.04 LTS.
    (CVE-2018-10852)

    It was discovered that SSSD incorrectly handled Group Policy Objects. When SSSD is configured with too     strict permissions causing the GPO to not be readable, SSSD will allow all authenticated users to login     instead of being denied, contrary to expectations. This issue only affected Ubuntu 18.04 LTS.
    (CVE-2018-16838)

    It was discovered that SSSD incorrectly handled users with no home directory set. When no home directory     was set, SSSD would return the root directory instead of an empty string, possibly bypassing security     measures. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-3811)

    Cedric Buissart discovered that SSSD incorrectly handled the sssctl command. In certain environments, a     local user could use this issue to execute arbitrary commands and possibly escalate privileges.
    (CVE-2021-3621)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
118533	RHEL 7 : sssd (RHSA-2018:3158)	Nessus	Red Hat Local Security Checks	10/31/2018	3/16/2025	high
119782	Amazon Linux 2 : sssd (ALAS-2018-1127)	Nessus	Amazon Linux Local Security Checks	12/20/2018	7/15/2024	high
119918	EulerOS 2.0 SP2 : sssd (EulerOS-SA-2018-1429)	Nessus	Huawei Local Security Checks	12/28/2018	7/12/2024	high
120068	SUSE SLED15 / SLES15 Security Update : sssd (SUSE-SU-2018:2144-1)	Nessus	SuSE Local Security Checks	1/2/2019	7/11/2024	high
121159	SUSE SLED12 / SLES12 Security Update : sssd (SUSE-SU-2019:0081-1)	Nessus	SuSE Local Security Checks	1/14/2019	6/26/2024	high
153144	Ubuntu 18.04 LTS / 20.04 LTS : SSSD vulnerabilities (USN-5067-1)	Nessus	Ubuntu Local Security Checks	9/8/2021	9/3/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high