According to the version of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - sssd: information leak from the sssd-sudo     responder.(CVE-2018-10852)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD utilizes too broad of a set of permissions. Any user who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user.(CVE-2018-10852)

This update for sssd fixes the following security issue :

  - CVE-2018-10852: Set stricter permissions on     /var/lib/sss/pipes/sudo to prevent the disclosure of     sudo rules for arbitrary users (bsc#1098377).

This update was imported from the SUSE:SLE-15:Update update project.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5067-1 advisory.

    Jakub Hrozek discovered that SSSD incorrectly handled file permissions. A local attacker could possibly     use this issue to read the sudo rules available for any user. This issue only affected Ubuntu 18.04 LTS.
    (CVE-2018-10852)

    It was discovered that SSSD incorrectly handled Group Policy Objects. When SSSD is configured with too     strict permissions causing the GPO to not be readable, SSSD will allow all authenticated users to login     instead of being denied, contrary to expectations. This issue only affected Ubuntu 18.04 LTS.
    (CVE-2018-16838)

    It was discovered that SSSD incorrectly handled users with no home directory set. When no home directory     was set, SSSD would return the root directory instead of an empty string, possibly bypassing security     measures. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-3811)

    Cedric Buissart discovered that SSSD incorrectly handled the sssctl command. In certain environments, a     local user could use this issue to execute arbitrary commands and possibly escalate privileges.
    (CVE-2021-3621)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user.

For Debian 8 'Jessie', these problems have been fixed in version 1.11.7-3+deb8u1.

We recommend that you upgrade your sssd packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the sssd packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The UNIX pipe which sudo uses to contact SSSD and read     the available sudo rules from SSSD utilizes too broad     of a set of permissions. Any user who can send a     message using the same raw protocol that sudo and SSSD     use can read the sudo rules available for any     user.(CVE-2018-10852)

  - It was found that sssd's sysdb_search_user_by_upn_res()     function did not sanitize requests when querying its     local cache and was vulnerable to injection. In a     centralized login environment, if a password hash was     locally cached for a given user, an authenticated     attacker could use this flaw to retrieve     it.(CVE-2017-12173)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide     permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD     use can read the sudo rules available for any user. This affects versions of SSSD before 1.16.3.
    (CVE-2018-10852)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3158 advisory.

    - Resolves: rhbz#1590603 - EMBARGOED CVE-2018-10852 sssd: information leak from the sssd-sudo responder     [rhel-7]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has sssd packages installed that are affected by a vulnerability:

  - The UNIX pipe which sudo uses to contact SSSD and read     the available sudo rules from SSSD utilizes too broad of     a set of permissions. Any user who can send a message     using the same raw protocol that sudo and SSSD use can     read the sudo rules available for any user.
    (CVE-2018-10852)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
119531	EulerOS 2.0 SP3 : sssd (EulerOS-SA-2018-1403)	Nessus	Huawei Local Security Checks	2018/12/10	2024/7/16	high
119782	Amazon Linux 2 : sssd (ALAS-2018-1127)	Nessus	Amazon Linux Local Security Checks	2018/12/20	2024/7/15	high
123249	openSUSE Security Update : sssd (openSUSE-2019-574)	Nessus	SuSE Local Security Checks	2019/3/27	2024/6/11	high
153144	Ubuntu 18.04 LTS / 20.04 LTS : SSSD vulnerabilities (USN-5067-1)	Nessus	Ubuntu Local Security Checks	2021/9/8	2025/9/3	high
111111	Debian DLA-1429-1 : sssd security update	Nessus	Debian Local Security Checks	2018/7/17	2024/9/4	high
111628	openSUSE Security Update : sssd (openSUSE-2018-847)	Nessus	SuSE Local Security Checks	2018/8/10	2024/8/22	high
124914	EulerOS Virtualization for ARM 64 3.0.1.0 : sssd (EulerOS-SA-2019-1411)	Nessus	Huawei Local Security Checks	2019/5/14	2022/5/20	high
221438	Linux Distros Unpatched Vulnerability : CVE-2018-10852	Nessus	Misc.	2025/3/4	2025/9/5	high
118776	Oracle Linux 7 : sssd (ELSA-2018-3158)	Nessus	Oracle Linux Local Security Checks	2018/11/7	2024/11/1	high
127267	NewStart CGSL CORE 5.04 / MAIN 5.04 : sssd Vulnerability (NS-SA-2019-0067)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high