CVE-2013-0220

The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.
Severity
UNKNOWN
AV:N/AC:L/Au:N/C:N/I:N/A:P
Atk. Vector
NETWORK
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
VendorProductVersion
fedoraprojectsssd
𝑥
≤ 1.9.3
fedoraprojectsssd
0.2.1
fedoraprojectsssd
0.3.0
fedoraprojectsssd
0.3.1
fedoraprojectsssd
0.3.2
fedoraprojectsssd
0.3.3
fedoraprojectsssd
0.4.0
fedoraprojectsssd
0.4.1
fedoraprojectsssd
0.5.0
fedoraprojectsssd
0.6.0
fedoraprojectsssd
0.6.1
fedoraprojectsssd
0.7.0
fedoraprojectsssd
0.7.1
fedoraprojectsssd
0.99.0
fedoraprojectsssd
0.99.1
fedoraprojectsssd
1.0.0
fedoraprojectsssd
1.0.1
fedoraprojectsssd
1.0.2
fedoraprojectsssd
1.0.3
fedoraprojectsssd
1.0.4
fedoraprojectsssd
1.0.5
fedoraprojectsssd
1.0.6
fedoraprojectsssd
1.0.99
fedoraprojectsssd
1.1.0
fedoraprojectsssd
1.1.1
fedoraprojectsssd
1.1.2
fedoraprojectsssd
1.1.91
fedoraprojectsssd
1.1.92
fedoraprojectsssd
1.2.0
fedoraprojectsssd
1.2.1
fedoraprojectsssd
1.2.2
fedoraprojectsssd
1.2.3
fedoraprojectsssd
1.2.4
fedoraprojectsssd
1.2.91
fedoraprojectsssd
1.3.0
fedoraprojectsssd
1.3.1
fedoraprojectsssd
1.4.0
fedoraprojectsssd
1.4.1
fedoraprojectsssd
1.5.0
fedoraprojectsssd
1.5.1
fedoraprojectsssd
1.5.2
fedoraprojectsssd
1.5.3
fedoraprojectsssd
1.5.4
fedoraprojectsssd
1.5.5
fedoraprojectsssd
1.5.6
fedoraprojectsssd
1.5.6.1
fedoraprojectsssd
1.5.7
fedoraprojectsssd
1.5.8
fedoraprojectsssd
1.5.9
fedoraprojectsssd
1.5.10
fedoraprojectsssd
1.5.11
fedoraprojectsssd
1.5.12
fedoraprojectsssd
1.5.13
fedoraprojectsssd
1.5.14
fedoraprojectsssd
1.5.15
fedoraprojectsssd
1.5.16
fedoraprojectsssd
1.5.17
fedoraprojectsssd
1.6.0
fedoraprojectsssd
1.6.1
fedoraprojectsssd
1.6.2
fedoraprojectsssd
1.6.3
fedoraprojectsssd
1.6.4
fedoraprojectsssd
1.7.0
fedoraprojectsssd
1.8.0
fedoraprojectsssd
1.8.0
fedoraprojectsssd
1.8.0
fedoraprojectsssd
1.8.0
fedoraprojectsssd
1.8.1
fedoraprojectsssd
1.8.2
fedoraprojectsssd
1.8.3
fedoraprojectsssd
1.8.4
fedoraprojectsssd
1.8.5
fedoraprojectsssd
1.8.6
fedoraprojectsssd
1.9.0
fedoraprojectsssd
1.9.1
fedoraprojectsssd
1.9.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
sssd
bullseye
2.4.1-2
fixed
squeeze
not-affected
bookworm
2.8.2-4
fixed
sid
2.9.5-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sssd
zesty
Fixed 1.9.3-0ubuntu2
released
yakkety
Fixed 1.9.3-0ubuntu2
released
xenial
Fixed 1.9.3-0ubuntu2
released
wily
Fixed 1.9.3-0ubuntu2
released
vivid
Fixed 1.9.3-0ubuntu2
released
utopic
Fixed 1.9.3-0ubuntu2
released
trusty
Fixed 1.9.3-0ubuntu2
released
saucy
Fixed 1.9.3-0ubuntu2
released
raring
Fixed 1.9.3-0ubuntu2
released
quantal
ignored
precise
ignored
oneiric
ignored
lucid
ignored
hardy
dne