PT-2018-3920 · Red Hat+5 · Sssd+6

Laura Pardo · Published 2018-06-26 · Updated 2024-06-15 · CVE-2018-10852

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions SSSD versions prior to 1.16.3

Description The issue is related to the UNIX pipe used by sudo to contact SSSD, which has overly permissive permissions. This allows anyone who can send messages using the same raw protocol as sudo and SSSD to read the available sudo rules for any user. The vulnerability can be exploited remotely, potentially allowing an attacker to access confidential data by sending specially crafted requests.

Recommendations For versions prior to 1.16.3, update to version 1.16.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the SSSD service to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2018-2235

BDU:2023-03473

CESA-2018_3158

CVE-2018-10852

DLA-1429-1

MGASA-2018-0350

OPENSUSE-SU-2018_2289-1

OPENSUSE-SU-2019_0051-1

OPENSUSE-SU-2024:11408-1

RHSA-2018:3158

RHSA-2018_3158

SUSE-SU-2018:2144-1

SUSE-SU-2018_2144-1

SUSE-SU-2019:0081-1

SUSE-SU-2019:0556-1

SUSE-SU-2019_0081-1

SUSE-SU-2019_0556-1

USN-5067-1

Affected Products

Alt Linux

Centos

Linuxmint

Red Hat

Sssd

Suse

Ubuntu

References · 51

• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20230525SE16MD · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-10852 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-3811 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-10852 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11408-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0350.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2019:0556-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3621 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10852 · Security Note
• https://ubuntu.com/security/CVE-2018-16838 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5067-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:3158 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-10852 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-10852#match-4160380 · Security Note
• https://osv.dev/vulnerability/DLA-1429-1 · Vendor Advisory