CVE-2014-0249
Fixed in a distro release EPSS <1%
The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors.
Products: fedoraproject sssd, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sssd | 1.11.7-1 |
| Debian 13 | sssd | 1.11.7-1 |
| Red Hat Enterprise Linux 6 | libipa_hbac | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | libipa_hbac-devel | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | libipa_hbac-python | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | libsss_idmap | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | libsss_idmap-devel | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | libsss_nss_idmap | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | libsss_nss_idmap-devel | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | libsss_nss_idmap-python | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | python-sssdconfig | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | sssd | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | sssd-ad | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | sssd-client | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | sssd-common | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | sssd-common-pac | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | sssd-dbus | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | sssd-debuginfo | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | sssd-ipa | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | sssd-krb5 | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | sssd-krb5-common | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | sssd-ldap | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | sssd-proxy | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 6 | sssd-tools | 0:1.11.6-30.el6 |
| Red Hat Enterprise Linux 7 | libipa_hbac | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | libipa_hbac-devel | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | libipa_hbac-python | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | libsss_idmap | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | libsss_idmap-devel | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | libsss_nss_idmap | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | libsss_nss_idmap-devel | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | libsss_nss_idmap-python | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | libsss_simpleifp | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | libsss_simpleifp-devel | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | python-sssdconfig | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-ad | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-client | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-common | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-common-pac | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-dbus | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-debuginfo | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-ipa | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-krb5 | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-krb5-common | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-ldap | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-libwbclient | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-libwbclient-devel | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-proxy | 0:1.12.2-58.el7 |
| Red Hat Enterprise Linux 7 | sssd-tools | 0:1.12.2-58.el7 |
| SUSE Linux Enterprise Desktop 12 SP1 | sssd | 1.11.5.1-28.1 |
| SUSE Linux Enterprise Server 12 SP1 | sssd | 1.11.5.1-28.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | sssd | 1.11.5.1-28.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | sssd | 1.11.5.1-28.1 |
| openSUSE Tumbleweed | sssd | 1.14.2-3.1 |