Read the docs
TI-2013-00154 Aliases CVE-2013-0220GHSA-jj7g-h828-6wpv

The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in…

Priority LOW 29CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.

Summary

The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.

Why it matters now

EPSS 0.03324 88th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 76

CPEVersionsRoleVendor
cpe:2.3:a:fedoraproject:sssd:*:*:*:*:*:*:*:*up to 1.9.3VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:0.2.1:*:*:*:*:*:*:*0.2.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:0.3.0:*:*:*:*:*:*:*0.3.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:0.3.1:*:*:*:*:*:*:*0.3.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:0.3.2:*:*:*:*:*:*:*0.3.2VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:0.3.3:*:*:*:*:*:*:*0.3.3VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:0.4.0:*:*:*:*:*:*:*0.4.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:0.4.1:*:*:*:*:*:*:*0.4.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:0.5.0:*:*:*:*:*:*:*0.5.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:0.6.0:*:*:*:*:*:*:*0.6.0VulnerableFedoraproject
  • cpe:2.3:a:fedoraproject:sssd:*:*:*:*:*:*:*:* Versions up to 1.9.3 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.2.1:*:*:*:*:*:*:* Versions 0.2.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.3.0:*:*:*:*:*:*:* Versions 0.3.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.3.1:*:*:*:*:*:*:* Versions 0.3.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.3.2:*:*:*:*:*:*:* Versions 0.3.2 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.3.3:*:*:*:*:*:*:* Versions 0.3.3 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.4.0:*:*:*:*:*:*:* Versions 0.4.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.4.1:*:*:*:*:*:*:* Versions 0.4.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.5.0:*:*:*:*:*:*:* Versions 0.5.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.6.0:*:*:*:*:*:*:* Versions 0.6.0 Vulnerable ·Fedoraproject
Show 66 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:fedoraproject:sssd:0.6.1:*:*:*:*:*:*:*0.6.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:0.7.0:*:*:*:*:*:*:*0.7.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:0.7.1:*:*:*:*:*:*:*0.7.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:0.99.0:*:*:*:*:*:*:*0.99.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:0.99.1:*:*:*:*:*:*:*0.99.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.0.3:*:*:*:*:*:*:*1.0.3VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.0.4:*:*:*:*:*:*:*1.0.4VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.0.5:*:*:*:*:*:*:*1.0.5VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.0.6:*:*:*:*:*:*:*1.0.6VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.0.99:*:*:*:*:*:*:*1.0.99VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.1.1:*:*:*:*:*:*:*1.1.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.1.2:*:*:*:*:*:*:*1.1.2VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.1.91:*:*:*:*:*:*:*1.1.91VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.1.92:*:*:*:*:*:*:*1.1.92VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.2.0:*:*:*:*:*:*:*1.2.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.2.1:*:*:*:*:*:*:*1.2.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.2.2:*:*:*:*:*:*:*1.2.2VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.2.3:*:*:*:*:*:*:*1.2.3VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.2.4:*:*:*:*:*:*:*1.2.4VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.2.91:*:*:*:*:*:*:*1.2.91VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.3.0:*:*:*:*:*:*:*1.3.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.3.1:*:*:*:*:*:*:*1.3.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.4.0:*:*:*:*:*:*:*1.4.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.0:*:*:*:*:*:*:*1.5.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.1:*:*:*:*:*:*:*1.5.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.2:*:*:*:*:*:*:*1.5.2VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.3:*:*:*:*:*:*:*1.5.3VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.4:*:*:*:*:*:*:*1.5.4VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.5:*:*:*:*:*:*:*1.5.5VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.6:*:*:*:*:*:*:*1.5.6VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.6.1:*:*:*:*:*:*:*1.5.6.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.7:*:*:*:*:*:*:*1.5.7VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.8:*:*:*:*:*:*:*1.5.8VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.9:*:*:*:*:*:*:*1.5.9VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.10:*:*:*:*:*:*:*1.5.10VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.11:*:*:*:*:*:*:*1.5.11VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.12:*:*:*:*:*:*:*1.5.12VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.13:*:*:*:*:*:*:*1.5.13VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.14:*:*:*:*:*:*:*1.5.14VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.15:*:*:*:*:*:*:*1.5.15VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.16:*:*:*:*:*:*:*1.5.16VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.5.17:*:*:*:*:*:*:*1.5.17VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.6.0:*:*:*:*:*:*:*1.6.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.6.1:*:*:*:*:*:*:*1.6.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.6.2:*:*:*:*:*:*:*1.6.2VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.6.3:*:*:*:*:*:*:*1.6.3VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.6.4:*:*:*:*:*:*:*1.6.4VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.7.0:*:*:*:*:*:*:*1.7.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.8.0:*:*:*:*:*:*:*1.8.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.8.0:beta1:*:*:*:*:*:*1.8.0 beta1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.8.0:beta2:*:*:*:*:*:*1.8.0 beta2VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.8.0:beta3:*:*:*:*:*:*1.8.0 beta3VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.8.1:*:*:*:*:*:*:*1.8.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.8.2:*:*:*:*:*:*:*1.8.2VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.8.3:*:*:*:*:*:*:*1.8.3VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.8.4:*:*:*:*:*:*:*1.8.4VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.8.5:*:*:*:*:*:*:*1.8.5VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.8.6:*:*:*:*:*:*:*1.8.6VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.9.0:*:*:*:*:*:*:*1.9.0VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.9.1:*:*:*:*:*:*:*1.9.1VulnerableFedoraproject
cpe:2.3:a:fedoraproject:sssd:1.9.2:*:*:*:*:*:*:*1.9.2VulnerableFedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.6.1:*:*:*:*:*:*:* Versions 0.6.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.7.0:*:*:*:*:*:*:* Versions 0.7.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.7.1:*:*:*:*:*:*:* Versions 0.7.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.99.0:*:*:*:*:*:*:* Versions 0.99.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:0.99.1:*:*:*:*:*:*:* Versions 0.99.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.0.4:*:*:*:*:*:*:* Versions 1.0.4 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.0.99:*:*:*:*:*:*:* Versions 1.0.99 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.1.91:*:*:*:*:*:*:* Versions 1.1.91 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.1.92:*:*:*:*:*:*:* Versions 1.1.92 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.2.91:*:*:*:*:*:*:* Versions 1.2.91 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.2:*:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.3:*:*:*:*:*:*:* Versions 1.5.3 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.4:*:*:*:*:*:*:* Versions 1.5.4 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.5:*:*:*:*:*:*:* Versions 1.5.5 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.6:*:*:*:*:*:*:* Versions 1.5.6 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.6.1:*:*:*:*:*:*:* Versions 1.5.6.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.7:*:*:*:*:*:*:* Versions 1.5.7 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.8:*:*:*:*:*:*:* Versions 1.5.8 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.9:*:*:*:*:*:*:* Versions 1.5.9 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.10:*:*:*:*:*:*:* Versions 1.5.10 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.11:*:*:*:*:*:*:* Versions 1.5.11 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.12:*:*:*:*:*:*:* Versions 1.5.12 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.13:*:*:*:*:*:*:* Versions 1.5.13 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.14:*:*:*:*:*:*:* Versions 1.5.14 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.15:*:*:*:*:*:*:* Versions 1.5.15 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.16:*:*:*:*:*:*:* Versions 1.5.16 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.5.17:*:*:*:*:*:*:* Versions 1.5.17 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.6.2:*:*:*:*:*:*:* Versions 1.6.2 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.6.3:*:*:*:*:*:*:* Versions 1.6.3 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.6.4:*:*:*:*:*:*:* Versions 1.6.4 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.8.0:beta1:*:*:*:*:*:* Versions 1.8.0 beta1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.8.0:beta2:*:*:*:*:*:* Versions 1.8.0 beta2 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.8.0:beta3:*:*:*:*:*:* Versions 1.8.0 beta3 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.8.1:*:*:*:*:*:*:* Versions 1.8.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.8.2:*:*:*:*:*:*:* Versions 1.8.2 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.8.3:*:*:*:*:*:*:* Versions 1.8.3 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.8.4:*:*:*:*:*:*:* Versions 1.8.4 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.8.5:*:*:*:*:*:*:* Versions 1.8.5 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.8.6:*:*:*:*:*:*:* Versions 1.8.6 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.9.0:*:*:*:*:*:*:* Versions 1.9.0 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.9.1:*:*:*:*:*:*:* Versions 1.9.1 Vulnerable ·Fedoraproject
  • cpe:2.3:a:fedoraproject:sssd:1.9.2:*:*:*:*:*:*:* Versions 1.9.2 Vulnerable ·Fedoraproject

Remediation

Red Hat 1 advisory

  • RHSA-2013:0508 Released 2013-02-20 · Red Hat rating Low
    sssd security, bug fix and enhancement update
    • Red Hat Enterprise Linux Desktop (v. 6) libipa_hbac-1.9.2-82.el6, libipa_hbac-python-1.9.2-82.el6, libsss_autofs-1.9.2-82.el6 +4
    • Red Hat Enterprise Linux Desktop Optional (v. 6) libipa_hbac-devel-1.9.2-82.el6, libsss_idmap-1.9.2-82.el6, libsss_idmap-devel-1.9.2-82.el6 +3
    • Red Hat Enterprise Linux HPC Node (v. 6) libipa_hbac-1.9.2-82.el6, libipa_hbac-python-1.9.2-82.el6, libsss_autofs-1.9.2-82.el6 +4
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) libipa_hbac-devel-1.9.2-82.el6, libsss_idmap-1.9.2-82.el6, libsss_idmap-devel-1.9.2-82.el6 +4
    • Red Hat Enterprise Linux Server (v. 6) libipa_hbac-1.9.2-82.el6, libipa_hbac-1.9.2-82.el6.ppc, libipa_hbac-python-1.9.2-82.el6 +6
    • Red Hat Enterprise Linux Server Optional (v. 6) libipa_hbac-devel-1.9.2-82.el6, libipa_hbac-devel-1.9.2-82.el6.ppc, libsss_idmap-1.9.2-82.el6 +7
    • Red Hat Enterprise Linux Workstation (v. 6) libipa_hbac-1.9.2-82.el6, libipa_hbac-python-1.9.2-82.el6, libsss_autofs-1.9.2-82.el6 +4
    • Red Hat Enterprise Linux Workstation Optional (v. 6) libipa_hbac-devel-1.9.2-82.el6, libsss_idmap-devel-1.9.2-82.el6, libsss_sudo-devel-1.9.2-82.el6 +2

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2013:0508
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2013:0508
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2013:0508
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2013:0508
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2013:0508
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2013:0508
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2013:0508
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2013:0508
Not affected: 1 product
  • Red Hat Enterprise Linux 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-0220
  2. 2026-10-03 Alias added: GHSA-jj7g-h828-6wpv

References

  • TI-2022-03895 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters CVSS 3.1HIGH 8.8
  • TI-2026-68594 Authorization bypass in SSSD HBAC rules via username collision CVSS 3.1HIGH 8.1
  • TI-2026-68550 Denial of service in sssd responder via connection retry loop CVSS 3.1MEDIUM 5.5
  • TI-2026-68273 Denial of service in SSSD via unprivileged autofs cache invalidation CVSS 3.1MEDIUM 5.5
  • TI-2026-61496 Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization CVSS 3.1MEDIUM 5.4
  • TI-2026-69019 Race condition in SSSD autofs responder enables denial of service CVSS 3.1MEDIUM 4.7
See all 35 →

Sources