Fedorahosted

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Fedorahosted records in CISA KEV

No Fedorahosted vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cronie 2 records LOW Sssd 2 records LOW Newt 1 record LOW

Records

2 records in Sssd · all components

TI-2009-02300 CVE-2009-2410 · GHSA-w98w-3mj2-7wj3

The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd…

LOW 37

The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain ac…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01979 Published 2009-07-30 No fix listed CWE-287

TI-2010-04074 CVE-2010-4341 · GHSA-qfqv-cr9x-27pg

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder…

LOW 12

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a cr…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00486 Published 2011-01-25 Fixed CWE-399

Open these records in search →

Critical	0
High	1
Medium	2
Low	2
No CVSS	0