According to the version of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - It was found that sssd's sysdb_search_user_by_upn_res()     function did not sanitize requests when querying its     local cache and was vulnerable to injection. In a     centralized login environment, if a password hash was     locally cached for a given user, an authenticated     attacker could use this flaw to retrieve     it.(CVE-2017-12173)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for [CVE-2017-12173]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 5.04, has sssd packages installed that are affected by a vulnerability:

  - It was found that sssd's sysdb_search_user_by_upn_res()     function did not sanitize requests when querying its     local cache and was vulnerable to injection. In a     centralized login environment, if a password hash was     locally cached for a given user, an authenticated     attacker could use this flaw to retrieve it.
    (CVE-2017-12173)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for sssd provides the following fixes: Security issues fixed :

  - CVE-2017-12173: Fixed unsanitized input when searching     in local cache database (bsc#1061832). Non security     issues fixed :

  - Fixed a segfault issue in     ldap_rfc_2307_fallback_to_local_users. (bsc#1055123)

  - Install /var/lib/sss/mc directory to correct sssd cache     invalidation behaviour. (bsc#1039567)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was found that sssd's sysdb_search_user_by_upn_res()     function did not sanitize requests when querying its     local cache and was vulnerable to injection. In a     centralized login environment, if a password hash was     locally cached for a given user, an authenticated     attacker could use this flaw to retrieve     it.(CVE-2017-12173)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3526-1 advisory.

    It was discovered that SSSD incorrectly handled certain inputs when querying its local cache. An attacker     could use this to inject arbitrary code and expose sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1877 advisory.

    - Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database     [rhel-6.10]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

发现 SSSD 在查询其本地缓存时未能正确处理某些输入。攻击者可能利用此问题注入任意代码并暴露敏感信息。

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行了自动清理和排版。

来自 Red Hat 安全公告 2018:1877： sssd 和 ding-libs 的更新现在可用于 Red Hat Enterprise Linux 6。 Red Hat 产品安全团队将此更新评级为具有中等安全影响。可从“参考”部分中的 CVE 链接获取通用漏洞评分系统 (CVSS) 基本分数，其针对每个漏洞给出了详细的严重性等级。 系统安全服务守护进程 (SSSD) 服务提供一系列守护进程，用于管理对远程目录的访问和认证机制。它还提供用于该系统和可插拔后端系统的名称服务切换 (NSS) 和可插拔认证模块 (PAM) 接口，以便连接到各种帐户源。 Ding-libs 程序包中包含一组系统安全服务守护进程 (SSSD) 以及其他项目使用的库，并提供能操作文件系统路径名 (libpath_utils) 的函数、来管理存储和访问时间属性 (libdhash) 的哈希表、在分层结构 (libcollection) 中收集数据的数据类型、动态增长、采用引用计数的数组 (libref_array)，以及将初始化格式 (INI) 的配置文件处理为库集合数据结构 (libini_config) 的库。 安全补丁： * sssd：在本地缓存数据库中搜索时存在未清理的输入 (CVE-2017-12173) 有关此安全问题的详细信息，包括其影响、CVSS 分数和其他相关信息，请参阅列于“参考”部分的 CVE 页面。 此问题由 Sumit Bose (Red Hat) 发现。 更多变更： 如需有关此发行版本的详细变更信息，请参阅可从“参考”部分链接的 Red Hat Enterprise Linux 6.10 版本说明与 Red Hat Enterprise Linux 6.10 技术札记。

运行版本 MAIN 5.04 的远程 NewStart CGSL 主机安装有受漏洞影响的 sssd 程序包：- 已发现 sssd 的 sysdb_search_user_by_upn_res() 函数在查询本地缓存时没有移除请求，容易遭到注入。在集中式登录环境中，如果既定用户的密码散列在本地缓存，经身份验证的攻击者可利用此缺陷检索它。(CVE-2017-12173) 请注意，Nessus 并未针对此问题进行测试，而仅依赖应用程序自我报告的版本号。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
117582	EulerOS Virtualization 2.5.1 : sssd (EulerOS-SA-2018-1273)	Nessus	Huawei Local Security Checks	2018/9/18	2024/8/6	high
105859	Fedora 27 : sssd (2017-39c5f8cd7e)	Nessus	Fedora Local Security Checks	2018/1/15	2021/1/11	high
127143	NewStart CGSL MAIN 5.04 : sssd Vulnerability (NS-SA-2019-0002)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	high
104430	SUSE SLED12 / SLES12 Security Update : sssd (SUSE-SU-2017:2937-1)	Nessus	SuSE Local Security Checks	2017/11/7	2021/1/6	high
105305	EulerOS 2.0 SP1 : sssd (EulerOS-SA-2017-1324)	Nessus	Huawei Local Security Checks	2017/12/18	2021/1/6	high
105749	Ubuntu 16.04 LTS : SSSD vulnerability (USN-3526-1)	Nessus	Ubuntu Local Security Checks	2018/1/11	2024/8/27	high
110703	Oracle Linux 6 : sssd / and / ding-libs (ELSA-2018-1877)	Nessus	Oracle Linux Local Security Checks	2018/6/27	2024/10/23	high
105749	Ubuntu 16.04 LTS：SSSD 漏洞 (USN-3526-1)	Nessus	Ubuntu Local Security Checks	2018/1/11	2024/8/27	high
110703	Oracle Linux 6 : ding-libs / sssd (ELSA-2018-1877)	Nessus	Oracle Linux Local Security Checks	2018/6/27	2024/10/23	high
127143	NewStart CGSL MAIN 5.04：sssd 漏洞 (NS-SA-2019-0002)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high