{"schemaVersion":3,"id":"CVE-2018-10852","aliases":["MGASA-2018-0350","SUSE-SU-2018:2144-1","SUSE-SU-2019:0081-1","RHSA-2018:3158","UBUNTU-CVE-2018-10852","DEBIAN-CVE-2018-10852","DLA-1429-1"],"status":"published","duplicateOf":null,"title":null,"description":"The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD before 1.16.3.","dates":{"published":"2018-06-26T14:00:00.000Z","modified":"2024-08-05T07:46:47.244Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":3.8,"severity":"low","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","score":3.8,"severity":"low","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","exploitability":5.1,"impact":2.3,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":0.01499,"percentile":0.73905,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.01499},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.014,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01499,"percentile":0.73905}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.014,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01499,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01499,"percentile":0.73905}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"}],"affected":[{"vendor":"debian","product":"sssd","name":"sssd","label":"sssd","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/sssd","purlType":"deb","versions":[{"text":"< 1.16.3-1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.11.7-3+deb8u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.16.3-1 | < 1.11.7-3+deb8u1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"sssd","name":"sssd","label":"sssd","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/sssd","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.16.1-1ubuntu1.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.16.1-1ubuntu1.8","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0","eol":{"isEol":true,"eolDate":"2020-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"8","label":"8 (Jessie)","eolFrom":"2020-06-30T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"8.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"fedoraproject","product":"sssd","name":"sssd","label":"sssd","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.16.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.16.3","eol":null,"hubHref":"/vendor/fedoraproject/sssd"},{"vendor":"mageia","product":"sssd","name":"sssd","label":"sssd","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/sssd","purlType":"rpm","versions":[{"text":"< 1.13.4-9.2.mga6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.4-9.2.mga6","eol":null,"hubHref":null},{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"},{"vendor":"redhat","product":"libipa_hbac","name":"libipa_hbac","label":"libipa_hbac","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libipa_hbac","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"libipa_hbac-devel","name":"libipa_hbac-devel","label":"libipa_hbac-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libipa_hbac-devel","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"libsss_autofs","name":"libsss_autofs","label":"libsss_autofs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libsss_autofs","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"libsss_certmap","name":"libsss_certmap","label":"libsss_certmap","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libsss_certmap","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"libsss_certmap-devel","name":"libsss_certmap-devel","label":"libsss_certmap-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libsss_certmap-devel","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"libsss_idmap","name":"libsss_idmap","label":"libsss_idmap","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libsss_idmap","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"libsss_idmap-devel","name":"libsss_idmap-devel","label":"libsss_idmap-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libsss_idmap-devel","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"libsss_nss_idmap","name":"libsss_nss_idmap","label":"libsss_nss_idmap","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libsss_nss_idmap","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"libsss_nss_idmap-devel","name":"libsss_nss_idmap-devel","label":"libsss_nss_idmap-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libsss_nss_idmap-devel","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"libsss_simpleifp","name":"libsss_simpleifp","label":"libsss_simpleifp","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libsss_simpleifp","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"libsss_simpleifp-devel","name":"libsss_simpleifp-devel","label":"libsss_simpleifp-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libsss_simpleifp-devel","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"libsss_sudo","name":"libsss_sudo","label":"libsss_sudo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libsss_sudo","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"python-libipa_hbac","name":"python-libipa_hbac","label":"python-libipa_hbac","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python-libipa_hbac","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"python-libsss_nss_idmap","name":"python-libsss_nss_idmap","label":"python-libsss_nss_idmap","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python-libsss_nss_idmap","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"python-sss","name":"python-sss","label":"python-sss","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python-sss","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"python-sss-murmur","name":"python-sss-murmur","label":"python-sss-murmur","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python-sss-murmur","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"python-sssdconfig","name":"python-sssdconfig","label":"python-sssdconfig","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python-sssdconfig","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd","name":"sssd","label":"sssd","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-ad","name":"sssd-ad","label":"sssd-ad","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-ad","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-client","name":"sssd-client","label":"sssd-client","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-client","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-common","name":"sssd-common","label":"sssd-common","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-common","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-common-pac","name":"sssd-common-pac","label":"sssd-common-pac","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-common-pac","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-dbus","name":"sssd-dbus","label":"sssd-dbus","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-dbus","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-debuginfo","name":"sssd-debuginfo","label":"sssd-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-debuginfo","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-ipa","name":"sssd-ipa","label":"sssd-ipa","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-ipa","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-kcm","name":"sssd-kcm","label":"sssd-kcm","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-kcm","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-krb5","name":"sssd-krb5","label":"sssd-krb5","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-krb5","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-krb5-common","name":"sssd-krb5-common","label":"sssd-krb5-common","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-krb5-common","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-ldap","name":"sssd-ldap","label":"sssd-ldap","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-ldap","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-libwbclient","name":"sssd-libwbclient","label":"sssd-libwbclient","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-libwbclient","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-libwbclient-devel","name":"sssd-libwbclient-devel","label":"sssd-libwbclient-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-libwbclient-devel","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-polkit-rules","name":"sssd-polkit-rules","label":"sssd-polkit-rules","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-polkit-rules","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-proxy","name":"sssd-proxy","label":"sssd-proxy","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-proxy","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-tools","name":"sssd-tools","label":"sssd-tools","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-tools","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"sssd-winbind-idmap","name":"sssd-winbind-idmap","label":"sssd-winbind-idmap","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/sssd-winbind-idmap","purlType":"rpm","versions":[{"text":"< 0:1.16.2-13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.16.2-13.el7","eol":null,"hubHref":null},{"vendor":"suse","product":"sssd&distro=SUSE Enterprise Storage 4","name":"sssd","label":"sssd&distro=SUSE Enterprise Storage 4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/sssd&distro=SUSE Enterprise Storage 4","purlType":"rpm","versions":[{"text":"< 1.13.4-34.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.4-34.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"sssd&distro=SUSE Linux Enterprise Desktop 12 SP3","name":"sssd","label":"sssd&distro=SUSE Linux Enterprise Desktop 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/sssd&distro=SUSE Linux Enterprise Desktop 12 SP3","purlType":"rpm","versions":[{"text":"< 1.13.4-34.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.4-34.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"sssd&distro=SUSE Linux Enterprise Module for Basesystem 15","name":"sssd","label":"sssd&distro=SUSE Linux Enterprise Module for Basesystem 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/sssd&distro=SUSE Linux Enterprise Module for Basesystem 15","purlType":"rpm","versions":[{"text":"< 1.16.1-3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.16.1-3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"sssd&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","name":"sssd","label":"sssd&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/sssd&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 1.13.4-34.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.4-34.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"sssd&distro=SUSE Linux Enterprise Server 12 SP3","name":"sssd","label":"sssd&distro=SUSE Linux Enterprise Server 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/sssd&distro=SUSE Linux Enterprise Server 12 SP3","purlType":"rpm","versions":[{"text":"< 1.13.4-34.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.4-34.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"sssd&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"sssd","label":"sssd&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/sssd&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 1.13.4-34.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.4-34.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"sssd&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"sssd","label":"sssd&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/sssd&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 1.13.4-34.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.4-34.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"sssd&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","name":"sssd","label":"sssd&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/sssd&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","purlType":"rpm","versions":[{"text":"< 1.13.4-34.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.4-34.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"sssd&distro=SUSE OpenStack Cloud 7","name":"sssd","label":"sssd&distro=SUSE OpenStack Cloud 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/sssd&distro=SUSE OpenStack Cloud 7","purlType":"rpm","versions":[{"text":"< 1.13.4-34.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.4-34.23.1","eol":null,"hubHref":null},{"vendor":"[unknown]","product":"sssd","name":"sssd","label":"sssd","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"SSSD 1.16.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"SSSD 1.16.3","eol":null,"hubHref":"/vendor/unknown/sssd"}],"affectedCount":53,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00019.html","label":"lists.debian.org/debian-lts-announce/2018/07/msg00019.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10852","label":"bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10852","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","Issue Tracking","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3158","label":"access.redhat.com/errata/RHSA-2018:3158","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory","Advisory"]},{"url":"http://www.securityfocus.com/bid/104547","label":"www.securityfocus.com/bid/104547","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0350.html","label":"advisories.mageia.org/MGASA-2018-0350.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23381","label":"bugs.mageia.org/show_bug.cgi?id=23381","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahosted.org/message/XUCDLKDVH7HZKPSJ7GEJAVNZS5CW35EK/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB","REPORT"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-08/msg00071.html","label":"lists.opensuse.org/opensuse-updates/2018-08/msg00071.html","hostname":"lists.opensuse.org","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182144-1/","label":"www.suse.com/support/update/announcement/2018/suse-su-20182144-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1098163","label":"bugzilla.suse.com/1098163","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1098377","label":"bugzilla.suse.com/1098377","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10852","label":"www.suse.com/security/cve/CVE-2018-10852","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190081-1/","label":"www.suse.com/support/update/announcement/2019/suse-su-20190081-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1010700","label":"bugzilla.suse.com/1010700","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1072728","label":"bugzilla.suse.com/1072728","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1080156","label":"bugzilla.suse.com/1080156","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1087320","label":"bugzilla.suse.com/1087320","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1101877","label":"bugzilla.suse.com/1101877","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1110299","label":"bugzilla.suse.com/1110299","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/updates/classification/#low","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index","label":"access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385665","label":"bugzilla.redhat.com/show_bug.cgi?id=1385665","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416528","label":"bugzilla.redhat.com/show_bug.cgi?id=1416528","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459348","label":"bugzilla.redhat.com/show_bug.cgi?id=1459348","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1509691","label":"bugzilla.redhat.com/show_bug.cgi?id=1509691","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1514061","label":"bugzilla.redhat.com/show_bug.cgi?id=1514061","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1516266","label":"bugzilla.redhat.com/show_bug.cgi?id=1516266","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1522928","label":"bugzilla.redhat.com/show_bug.cgi?id=1522928","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534749","label":"bugzilla.redhat.com/show_bug.cgi?id=1534749","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537272","label":"bugzilla.redhat.com/show_bug.cgi?id=1537272","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537279","label":"bugzilla.redhat.com/show_bug.cgi?id=1537279","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1538555","label":"bugzilla.redhat.com/show_bug.cgi?id=1538555","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1546754","label":"bugzilla.redhat.com/show_bug.cgi?id=1546754","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1558498","label":"bugzilla.redhat.com/show_bug.cgi?id=1558498","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1562025","label":"bugzilla.redhat.com/show_bug.cgi?id=1562025","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1565774","label":"bugzilla.redhat.com/show_bug.cgi?id=1565774","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566782","label":"bugzilla.redhat.com/show_bug.cgi?id=1566782","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1571526","label":"bugzilla.redhat.com/show_bug.cgi?id=1571526","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577335","label":"bugzilla.redhat.com/show_bug.cgi?id=1577335","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1578291","label":"bugzilla.redhat.com/show_bug.cgi?id=1578291","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1583251","label":"bugzilla.redhat.com/show_bug.cgi?id=1583251","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1583725","label":"bugzilla.redhat.com/show_bug.cgi?id=1583725","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588810","label":"bugzilla.redhat.com/show_bug.cgi?id=1588810","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600822","label":"bugzilla.redhat.com/show_bug.cgi?id=1600822","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602781","label":"bugzilla.redhat.com/show_bug.cgi?id=1602781","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607313","label":"bugzilla.redhat.com/show_bug.cgi?id=1607313","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610667","label":"bugzilla.redhat.com/show_bug.cgi?id=1610667","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3158.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3158.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10852","label":"access.redhat.com/security/cve/CVE-2018-10852","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10852","label":"www.cve.org/CVERecord?id=CVE-2018-10852","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10852","label":"nvd.nist.gov/vuln/detail/CVE-2018-10852","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://pagure.io/SSSD/sssd/issue/3766","label":"pagure.io/SSSD/sssd/issue/3766","hostname":"pagure.io","tags":["ARTICLE"]},{"url":"https://ubuntu.com/security/CVE-2018-10852","label":"ubuntu.com/security/CVE-2018-10852","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-5067-1","label":"ubuntu.com/security/notices/USN-5067-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-10852","label":"security-tracker.debian.org/tracker/CVE-2018-10852","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:11408-1","SUSE-SU-2019:0556-1","USN-5067-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:11408-1","SUSE-SU-2019:0556-1","USN-5067-1"]},"timeline":[{"kind":"published","date":"2018-06-26T14:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T07:46:47.244Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T20:14:13.151Z","stale":false,"partial":false}}