Amazon Linux AMI update for sssd

1) Race condition

EUVDB-ID: #VU88857

Risk: Medium

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-3758

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to a race condition where the GPO policy is not consistently applied for authenticated users. A remote user can exploit the race and gain unauthorized access to the system.

Mitigation

Update the affected packages:

aarch64:
    libsss_nss_idmap-devel-2.9.4-1.amzn2023.0.2.aarch64
    libsss_certmap-2.9.4-1.amzn2023.0.2.aarch64
    sssd-common-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-idp-2.9.4-1.amzn2023.0.2.aarch64
    sssd-nfs-idmap-2.9.4-1.amzn2023.0.2.aarch64
    libsss_simpleifp-devel-2.9.4-1.amzn2023.0.2.aarch64
    sssd-client-2.9.4-1.amzn2023.0.2.aarch64
    sssd-dbus-2.9.4-1.amzn2023.0.2.aarch64
    sssd-ldap-2.9.4-1.amzn2023.0.2.aarch64
    sssd-ad-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-krb5-common-2.9.4-1.amzn2023.0.2.aarch64
    libsss_certmap-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-common-pac-2.9.4-1.amzn2023.0.2.aarch64
    sssd-kcm-2.9.4-1.amzn2023.0.2.aarch64
    sssd-common-pac-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-ipa-2.9.4-1.amzn2023.0.2.aarch64
    sssd-tools-2.9.4-1.amzn2023.0.2.aarch64
    sssd-common-2.9.4-1.amzn2023.0.2.aarch64
    sssd-krb5-common-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    libipa_hbac-devel-2.9.4-1.amzn2023.0.2.aarch64
    sssd-client-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    libsss_simpleifp-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-debugsource-2.9.4-1.amzn2023.0.2.aarch64
    libsss_idmap-devel-2.9.4-1.amzn2023.0.2.aarch64
    libsss_certmap-devel-2.9.4-1.amzn2023.0.2.aarch64
    libipa_hbac-2.9.4-1.amzn2023.0.2.aarch64
    sssd-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-ipa-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-winbind-idmap-2.9.4-1.amzn2023.0.2.aarch64
    libsss_simpleifp-2.9.4-1.amzn2023.0.2.aarch64
    libsss_idmap-2.9.4-1.amzn2023.0.2.aarch64
    sssd-dbus-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    libsss_sudo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-proxy-2.9.4-1.amzn2023.0.2.aarch64
    sssd-nfs-idmap-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    libsss_nss_idmap-2.9.4-1.amzn2023.0.2.aarch64
    python3-libipa_hbac-2.9.4-1.amzn2023.0.2.aarch64
    sssd-proxy-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    python3-libsss_nss_idmap-2.9.4-1.amzn2023.0.2.aarch64
    libsss_autofs-2.9.4-1.amzn2023.0.2.aarch64
    sssd-tools-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-ad-2.9.4-1.amzn2023.0.2.aarch64
    python3-sss-2.9.4-1.amzn2023.0.2.aarch64
    libsss_nss_idmap-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-kcm-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    python3-sss-murmur-2.9.4-1.amzn2023.0.2.aarch64
    sssd-krb5-2.9.4-1.amzn2023.0.2.aarch64
    python3-libipa_hbac-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-idp-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    libsss_idmap-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    python3-sss-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    libsss_autofs-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    libsss_sudo-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-ldap-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    python3-libsss_nss_idmap-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    libipa_hbac-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-2.9.4-1.amzn2023.0.2.aarch64
    sssd-krb5-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    sssd-winbind-idmap-debuginfo-2.9.4-1.amzn2023.0.2.aarch64
    python3-sss-murmur-debuginfo-2.9.4-1.amzn2023.0.2.aarch64

noarch:
    python3-sssdconfig-2.9.4-1.amzn2023.0.2.noarch

src:
    sssd-2.9.4-1.amzn2023.0.2.src

x86_64:
    sssd-ad-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-ipa-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    libsss_simpleifp-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    libsss_nss_idmap-devel-2.9.4-1.amzn2023.0.2.x86_64
    sssd-kcm-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-common-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-tools-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    libsss_simpleifp-devel-2.9.4-1.amzn2023.0.2.x86_64
    sssd-krb5-2.9.4-1.amzn2023.0.2.x86_64
    sssd-ipa-2.9.4-1.amzn2023.0.2.x86_64
    libipa_hbac-devel-2.9.4-1.amzn2023.0.2.x86_64
    sssd-dbus-2.9.4-1.amzn2023.0.2.x86_64
    sssd-ad-2.9.4-1.amzn2023.0.2.x86_64
    libsss_certmap-devel-2.9.4-1.amzn2023.0.2.x86_64
    sssd-common-pac-2.9.4-1.amzn2023.0.2.x86_64
    sssd-proxy-2.9.4-1.amzn2023.0.2.x86_64
    sssd-tools-2.9.4-1.amzn2023.0.2.x86_64
    sssd-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    libsss_certmap-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-ldap-2.9.4-1.amzn2023.0.2.x86_64
    sssd-kcm-2.9.4-1.amzn2023.0.2.x86_64
    python3-libipa_hbac-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-dbus-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-debugsource-2.9.4-1.amzn2023.0.2.x86_64
    sssd-krb5-common-2.9.4-1.amzn2023.0.2.x86_64
    libsss_nss_idmap-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-nfs-idmap-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-client-2.9.4-1.amzn2023.0.2.x86_64
    sssd-krb5-common-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    libsss_idmap-devel-2.9.4-1.amzn2023.0.2.x86_64
    libsss_certmap-2.9.4-1.amzn2023.0.2.x86_64
    sssd-client-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-common-2.9.4-1.amzn2023.0.2.x86_64
    sssd-proxy-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-common-pac-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    python3-sss-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    libsss_nss_idmap-2.9.4-1.amzn2023.0.2.x86_64
    libsss_idmap-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-idp-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    libsss_idmap-2.9.4-1.amzn2023.0.2.x86_64
    libsss_autofs-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    libsss_autofs-2.9.4-1.amzn2023.0.2.x86_64
    libsss_sudo-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    libipa_hbac-2.9.4-1.amzn2023.0.2.x86_64
    sssd-ldap-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    libsss_sudo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-nfs-idmap-2.9.4-1.amzn2023.0.2.x86_64
    python3-sss-2.9.4-1.amzn2023.0.2.x86_64
    python3-libipa_hbac-2.9.4-1.amzn2023.0.2.x86_64
    python3-libsss_nss_idmap-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    libsss_simpleifp-2.9.4-1.amzn2023.0.2.x86_64
    libipa_hbac-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-2.9.4-1.amzn2023.0.2.x86_64
    sssd-idp-2.9.4-1.amzn2023.0.2.x86_64
    sssd-krb5-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-winbind-idmap-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    python3-libsss_nss_idmap-2.9.4-1.amzn2023.0.2.x86_64
    python3-sss-murmur-debuginfo-2.9.4-1.amzn2023.0.2.x86_64
    sssd-winbind-idmap-2.9.4-1.amzn2023.0.2.x86_64
    python3-sss-murmur-2.9.4-1.amzn2023.0.2.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

sssd: All versions

CPE2.3

• cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
• cpe:2.3:a:amazon_web_services:sssd:*:*:*:*:*:amazon_linux_ami:*:*

External links

https://alas.aws.amazon.com/AL2023/ALAS-2024-648.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.