Detections
Analytics

Amazon Linux 2 : sssd (ALAS-2018-1127)

high Nessus Plugin ID 119782

Language:

Synopsis

The remote Amazon Linux 2 host is missing a security update.

Description

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD utilizes too broad of a set of permissions. Any user who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user.(CVE-2018-10852)

Solution

Run 'yum update sssd' to update your system.

See Also

https://alas.aws.amazon.com/AL2/ALAS-2018-1127.html

Plugin Details

Severity: High

ID: 119782

File Name: al2_ALAS-2018-1127.nasl

Version: 1.3

Type: local

Agent: unix

Published: 12/20/2018

Updated: 7/15/2024

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2018-10852

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:amazon:linux:sssd-krb5, p-cpe:/a:amazon:linux:python-libsss_nss_idmap, p-cpe:/a:amazon:linux:libsss_sudo, p-cpe:/a:amazon:linux:libsss_certmap, p-cpe:/a:amazon:linux:libsss_nss_idmap-devel, cpe:/o:amazon:linux:2, p-cpe:/a:amazon:linux:sssd-ad, p-cpe:/a:amazon:linux:libsss_idmap-devel, p-cpe:/a:amazon:linux:sssd-proxy, p-cpe:/a:amazon:linux:libsss_idmap, p-cpe:/a:amazon:linux:python-sss-murmur, p-cpe:/a:amazon:linux:sssd-dbus, p-cpe:/a:amazon:linux:sssd-common, p-cpe:/a:amazon:linux:sssd-libwbclient, p-cpe:/a:amazon:linux:sssd, p-cpe:/a:amazon:linux:sssd-ldap, p-cpe:/a:amazon:linux:python-sss, p-cpe:/a:amazon:linux:libipa_hbac-devel, p-cpe:/a:amazon:linux:sssd-winbind-idmap, p-cpe:/a:amazon:linux:python-sssdconfig, p-cpe:/a:amazon:linux:libsss_simpleifp-devel, p-cpe:/a:amazon:linux:sssd-debuginfo, p-cpe:/a:amazon:linux:sssd-common-pac, p-cpe:/a:amazon:linux:libsss_autofs, p-cpe:/a:amazon:linux:libsss_certmap-devel, p-cpe:/a:amazon:linux:sssd-ipa, p-cpe:/a:amazon:linux:sssd-kcm, p-cpe:/a:amazon:linux:sssd-client, p-cpe:/a:amazon:linux:sssd-krb5-common, p-cpe:/a:amazon:linux:sssd-tools, p-cpe:/a:amazon:linux:libsss_simpleifp, p-cpe:/a:amazon:linux:python-libipa_hbac, p-cpe:/a:amazon:linux:sssd-polkit-rules, p-cpe:/a:amazon:linux:libipa_hbac, p-cpe:/a:amazon:linux:sssd-libwbclient-devel, p-cpe:/a:amazon:linux:libsss_nss_idmap

Required KB Items: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 12/19/2018

Vulnerability Publication Date: 6/26/2018

Reference Information

CVE: CVE-2018-10852

ALAS: 2018-1127