CVE-2013-0220

EUVD-2013-0254
The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
Affected Products (NVD)
VendorProductVersion
fedoraprojectsssd
𝑥
≤ 1.9.3
fedoraprojectsssd
0.2.1
fedoraprojectsssd
0.3.0
fedoraprojectsssd
0.3.1
fedoraprojectsssd
0.3.2
fedoraprojectsssd
0.3.3
fedoraprojectsssd
0.4.0
fedoraprojectsssd
0.4.1
fedoraprojectsssd
0.5.0
fedoraprojectsssd
0.6.0
fedoraprojectsssd
0.6.1
fedoraprojectsssd
0.7.0
fedoraprojectsssd
0.7.1
fedoraprojectsssd
0.99.0
fedoraprojectsssd
0.99.1
fedoraprojectsssd
1.0.0
fedoraprojectsssd
1.0.1
fedoraprojectsssd
1.0.2
fedoraprojectsssd
1.0.3
fedoraprojectsssd
1.0.4
fedoraprojectsssd
1.0.5
fedoraprojectsssd
1.0.6
fedoraprojectsssd
1.0.99
fedoraprojectsssd
1.1.0
fedoraprojectsssd
1.1.1
fedoraprojectsssd
1.1.2
fedoraprojectsssd
1.1.91
fedoraprojectsssd
1.1.92
fedoraprojectsssd
1.2.0
fedoraprojectsssd
1.2.1
fedoraprojectsssd
1.2.2
fedoraprojectsssd
1.2.3
fedoraprojectsssd
1.2.4
fedoraprojectsssd
1.2.91
fedoraprojectsssd
1.3.0
fedoraprojectsssd
1.3.1
fedoraprojectsssd
1.4.0
fedoraprojectsssd
1.4.1
fedoraprojectsssd
1.5.0
fedoraprojectsssd
1.5.1
fedoraprojectsssd
1.5.2
fedoraprojectsssd
1.5.3
fedoraprojectsssd
1.5.4
fedoraprojectsssd
1.5.5
fedoraprojectsssd
1.5.6
fedoraprojectsssd
1.5.6.1
fedoraprojectsssd
1.5.7
fedoraprojectsssd
1.5.8
fedoraprojectsssd
1.5.9
fedoraprojectsssd
1.5.10
fedoraprojectsssd
1.5.11
fedoraprojectsssd
1.5.12
fedoraprojectsssd
1.5.13
fedoraprojectsssd
1.5.14
fedoraprojectsssd
1.5.15
fedoraprojectsssd
1.5.16
fedoraprojectsssd
1.5.17
fedoraprojectsssd
1.6.0
fedoraprojectsssd
1.6.1
fedoraprojectsssd
1.6.2
fedoraprojectsssd
1.6.3
fedoraprojectsssd
1.6.4
fedoraprojectsssd
1.7.0
fedoraprojectsssd
1.8.0
fedoraprojectsssd
1.8.0:beta1
fedoraprojectsssd
1.8.0:beta2
fedoraprojectsssd
1.8.0:beta3
fedoraprojectsssd
1.8.1
fedoraprojectsssd
1.8.2
fedoraprojectsssd
1.8.3
fedoraprojectsssd
1.8.4
fedoraprojectsssd
1.8.5
fedoraprojectsssd
1.8.6
fedoraprojectsssd
1.9.0
fedoraprojectsssd
1.9.1
fedoraprojectsssd
1.9.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
sssd
bookworm
2.8.2-4
fixed
bullseye
2.4.1-2
fixed
sid
2.9.5-3
fixed
squeeze
not-affected
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sssd
hardy
dne
lucid
ignored
oneiric
ignored
precise
ignored
quantal
ignored
raring
Fixed 1.9.3-0ubuntu2
released
saucy
Fixed 1.9.3-0ubuntu2
released
trusty
Fixed 1.9.3-0ubuntu2
released
utopic
Fixed 1.9.3-0ubuntu2
released
vivid
Fixed 1.9.3-0ubuntu2
released
wily
Fixed 1.9.3-0ubuntu2
released
xenial
Fixed 1.9.3-0ubuntu2
released
yakkety
Fixed 1.9.3-0ubuntu2
released
zesty
Fixed 1.9.3-0ubuntu2
released