Summary
It was discovered that SSSD incorrectly handled certain inputs when querying
its local cache. An attacker could use this to inject arbitrary code and expose
sensitive information.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | sssd | 1.13.4-1ubuntu1.10 |
Vulnerabilities 1
-
Medium 4.3
It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying …
References
-
report
https://ubuntu.com/security/CVE-2017-12173