National Cyber Awareness System

Vulnerability Summary for CVE-2013-0220

Overview

The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.4

Hyperlink:https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.4

External Source: CONFIRM

Name: https://fedorahosted.org/sssd/ticket/1781

Hyperlink:https://fedorahosted.org/sssd/ticket/1781

External Source: MISC

Name: https://bugzilla.redhat.com/show_bug.cgi?id=884601

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=884601

External Source: BID

Name: 57539

Hyperlink:http://www.securityfocus.com/bid/57539

External Source: SECUNIA

Name: 52315

Type: Advisory

Hyperlink:http://secunia.com/advisories/52315

External Source: SECUNIA

Name: 51928

Type: Advisory

Hyperlink:http://secunia.com/advisories/51928

External Source: REDHAT

Name: RHSA-2013:0508

Hyperlink:http://rhn.redhat.com/errata/RHSA-2013-0508.html

External Source: FEDORA

Name: FEDORA-2013-1826

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098613.html

External Source: FEDORA

Name: FEDORA-2013-1795

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098434.html

External Source: CONFIRM

Name: http://git.fedorahosted.org/cgit/sssd.git/commit/?id=30e2585dd46b62aa3a4abdf6de3f40a20e1743ab

Hyperlink:http://git.fedorahosted.org/cgit/sssd.git/commit/?id=30e2585dd46b62aa3a4abdf6de3f40a20e1743ab

External Source: CONFIRM

Name: http://git.fedorahosted.org/cgit/sssd.git/commit/?id=2bd514cfde1938b1e245af11c9b548d58d49b325

Hyperlink:http://git.fedorahosted.org/cgit/sssd.git/commit/?id=2bd514cfde1938b1e245af11c9b548d58d49b325