CVE:CVE-2017-12173
CNNVD:CNNVD-201807-1923
SSSD是一款用于管理对远程目录和身份验证机制访问的守护进程。
SSSD 1.16.0之前版本中的‘sysdb_search_user_by_upn_res()’函数存在安全漏洞，该漏洞源于在查询本地缓存时，程序没有过滤请求。攻击者可利用该漏洞检索密码散列。
solution:Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,and avoid the version 7.4; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.4,7.5,and avoid the version 7.4,7.5; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade fedoraproject sssd to a higher version than 1.16.0,and avoid the version (,1.16.0)