The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2873-1 advisory.

  - A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-     fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a     specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this     vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2021-3621)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-3336 advisory.

    [1.16.5-10.0.1]
    - Revert Redhat's change of disallowing duplicated incomplete gid       when 'id_provider=ldap' is used, which caused regression in AD       environment. [Orabug: 29286774] [Doc ID 2605732.1]

    [1.16.5-10.10]
    - Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down

    [1.16.5-10.9]
    - Resolves: rhbz#1988463 - Missing search index for  [rhel-7.9.z]
    - Resolves: rhbz#1968330 - id lookup is failing intermittently
    - Resolves: rhbz#1964415 - Memory leak in the simple access provider
    - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5067-1 advisory.

    Jakub Hrozek discovered that SSSD incorrectly handled file permissions. A local attacker could possibly     use this issue to read the sudo rules available for any user. This issue only affected Ubuntu 18.04 LTS.
    (CVE-2018-10852)

    It was discovered that SSSD incorrectly handled Group Policy Objects. When SSSD is configured with too     strict permissions causing the GPO to not be readable, SSSD will allow all authenticated users to login     instead of being denied, contrary to expectations. This issue only affected Ubuntu 18.04 LTS.
    (CVE-2018-16838)

    It was discovered that SSSD incorrectly handled users with no home directory set. When no home directory     was set, SSSD would return the root directory instead of an empty string, possibly bypassing security     measures. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-3811)

    Cedric Buissart discovered that SSSD incorrectly handled the sssctl command. In certain environments, a     local user could use this issue to execute arbitrary commands and possibly escalate privileges.
    (CVE-2021-3621)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-     fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a     specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this     vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2021-3621)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-     fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a     specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this     vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2021-3621)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has sssd packages installed that are affected by a vulnerability:

  - A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-     fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a     specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this     vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2021-3621)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2763-1 advisory.

  - A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-     fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a     specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this     vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2021-3621)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of sssd installed on the remote host is prior to 1.16.4-21.27. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1723 advisory.

    A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-     fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a     specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this     vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2021-3621)

    A vulnerability was found in SSSD, in the libsss_certmap functionality. PKINIT enables a client to     authenticate to the KDC using an X.509 certificate and the corresponding private key, rather than a     passphrase or keytab. FreeIPA uses mapping rules to map a certificate presented during a PKINIT     authentication request to the corresponding principal. The mapping filter is vulnerable to LDAP filter     injection. The search result can be influenced by values in the certificate, which may be attacker     controlled. In the most extreme case, an attacker could gain control of the admin account, leading to full     domain takeover. (CVE-2022-4254)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2364:07 advisory.

    * sssd: shell command injection in sssctl (CVE-2021-3621)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2399:08 advisory.

    * sssd: shell command injection in sssctl (CVE-2021-3621)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
152915	SUSE SLED12 / SLES12 Security Update : sssd (SUSE-SU-2021:2873-1)	Nessus	SuSE Local Security Checks	2021/8/31	2023/7/13	high
152980	Oracle Linux 7 : sssd (ELSA-2021-3336)	Nessus	Oracle Linux Local Security Checks	2021/9/2	2024/11/1	high
153144	Ubuntu 18.04 LTS / 20.04 LTS : SSSD vulnerabilities (USN-5067-1)	Nessus	Ubuntu Local Security Checks	2021/9/8	2025/9/3	high
154804	EulerOS 2.0 SP8 : sssd (EulerOS-SA-2021-2646)	Nessus	Huawei Local Security Checks	2021/11/2	2022/1/20	high
155274	EulerOS 2.0 SP9 : sssd (EulerOS-SA-2021-2724)	Nessus	Huawei Local Security Checks	2021/11/11	2022/1/20	high
155514	EulerOS Virtualization 2.9.1 : sssd (EulerOS-SA-2021-2739)	Nessus	Huawei Local Security Checks	2021/11/17	2022/4/18	high
155515	EulerOS Virtualization 2.9.0 : sssd (EulerOS-SA-2021-2767)	Nessus	Huawei Local Security Checks	2021/11/17	2022/4/18	high
156541	EulerOS Virtualization 3.0.2.6 : sssd (EulerOS-SA-2021-2880)	Nessus	Huawei Local Security Checks	2022/1/6	2022/1/20	high
160759	NewStart CGSL CORE 5.04 / MAIN 5.04 : sssd Vulnerability (NS-SA-2022-0013)	Nessus	NewStart CGSL Local Security Checks	2022/5/9	2022/5/9	high
164059	SUSE SLED15 / SLES15 Security Update : sssd (SUSE-SU-2022:2763-1)	Nessus	SuSE Local Security Checks	2022/8/11	2023/7/14	high
173941	Amazon Linux AMI : sssd (ALAS-2023-1723)	Nessus	Amazon Linux Local Security Checks	2023/4/6	2024/12/11	high
291635	MiracleLinux 8 : sssd-2.4.0-9.el8.2 (AXSA:2021-2364:07)	Nessus	Miracle Linux Local Security Checks	2026/1/19	2026/1/19	high
293888	MiracleLinux 7 : sssd-1.16.5-10.el7.10 (AXSA:2021-2399:08)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high