CVE:CVE-2018-10852
CNNVD:CNNVD-201806-1300
SSSD是一款用于管理对远程目录和身份验证机制访问的守护进程。
SSSD 1.16.3之前版本中存在安全漏洞，该漏洞源于程序没有限制UNIX pipe的权限。攻击者可通过发送消息利用该漏洞读取sudo规则。
solution:Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject sssd to a higher version than 1.16.3,and avoid the version (,1.16.3); Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0