CVE-2015-5292

Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote authenticated users to cause a denial of service (memory consumption) via a large number of logins that trigger parsing of PAC blobs during Kerberos authentication.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
fedoraprojectsssd
1.10.0
fedoraprojectsssd
1.10.1
fedoraprojectsssd
1.11.0
fedoraprojectsssd
1.11.1
fedoraprojectsssd
1.11.2
fedoraprojectsssd
1.11.3
fedoraprojectsssd
1.11.4
fedoraprojectsssd
1.11.5
fedoraprojectsssd
1.11.6
fedoraprojectsssd
1.11.7
fedoraprojectsssd
1.12.0
fedoraprojectsssd
1.12.1
fedoraprojectsssd
1.12.2
fedoraprojectsssd
1.12.3
fedoraprojectsssd
1.12.4
fedoraprojectsssd
1.12.5
fedoraprojectsssd
1.13.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
sssd
bookworm
2.8.2-4
fixed
bullseye
2.4.1-2
fixed
jessie
no-dsa
sid
2.9.5-3
fixed
squeeze
not-affected
wheezy
not-affected
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sssd
artful
not-affected
bionic
not-affected
cosmic
not-affected
disco
not-affected
precise
not-affected
trusty
dne
vivid
ignored
wily
ignored
xenial
not-affected
yakkety
not-affected
zesty
not-affected
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
libipa
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
libsss
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
python-libipa
RHEL 7
0:1.13.0-40.el7
fixed
python-libsss
RHEL 7
0:1.13.0-40.el7
fixed
python-sss
RHEL 7
0:1.13.0-40.el7
fixed
python-sss-murmur
RHEL 7
0:1.13.0-40.el7
fixed
python-sssdconfig
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
sssd
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
sssd-ad
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
sssd-client
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
sssd-common
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
sssd-common-pac
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
sssd-dbus
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
sssd-ipa
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
sssd-krb5
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
sssd-krb5-common
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
sssd-ldap
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
sssd-libwbclient
RHEL 7
0:1.13.0-40.el7
fixed
sssd-libwbclient-devel
RHEL 7
0:1.13.0-40.el7
fixed
sssd-proxy
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
sssd-tools
RHEL 6
0:1.12.4-47.el6_7.4
fixed
RHEL 7
0:1.13.0-40.el7
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
libipa_hbac
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
libipa_hbac-devel
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
libsss_idmap
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
libsss_idmap-devel
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
libsss_nss_idmap
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
libsss_nss_idmap-devel
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
libsss_simpleifp
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
libsss_simpleifp-devel
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
python27-libipa_hbac
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
python27-libsss_nss_idmap
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
python27-sss
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
python27-sss-murmur
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
python27-sssdconfig
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-ad
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-client
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-common
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-common-pac
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-dbus
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-debuginfo
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-ipa
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-krb5
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-krb5-common
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-ldap
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-libwbclient
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-libwbclient-devel
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-proxy
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
sssd-tools
Amazon Linux 1
0:1.13.0-40.6.amzn1
fixed
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169110.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169597.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169613.html
http://permalink.gmane.org/gmane.linux.redhat.sssd.user/3422
http://rhn.redhat.com/errata/RHSA-2015-2019.html
http://rhn.redhat.com/errata/RHSA-2015-2355.html
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
http://www.securityfocus.com/bid/77529
http://www.securitytracker.com/id/1034038
https://bugzilla.redhat.com/show_bug.cgi?id=1267580
https://fedorahosted.org/sssd/attachment/ticket/2803/0001-Fix-memory-leak-in-sssdpac_verify.patch
https://fedorahosted.org/sssd/ticket/2803
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169110.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169597.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169613.html
http://permalink.gmane.org/gmane.linux.redhat.sssd.user/3422
http://rhn.redhat.com/errata/RHSA-2015-2019.html
http://rhn.redhat.com/errata/RHSA-2015-2355.html
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
http://www.securityfocus.com/bid/77529
http://www.securitytracker.com/id/1034038
https://bugzilla.redhat.com/show_bug.cgi?id=1267580
https://fedorahosted.org/sssd/attachment/ticket/2803/0001-Fix-memory-leak-in-sssdpac_verify.patch
https://fedorahosted.org/sssd/ticket/2803
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1