Known vulnerabilities in sssd (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:sssd_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting sssd (Ubuntu package) sssd (Ubuntu package) is affected by 6 known vulnerabilities: 1 high, 2 medium, 3 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88857 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-3758
CWE-362 Medium
No
No
2.2.3-3ubuntu0.13, 2.6.3-1ubuntu3.3, 2.9.1-2ubuntu2.1, 2.9.4-1.1ubuntu6.1 19.04.2024 SB2024041945
SB2024041946
SB2024041947
and 19 more
#VU71473 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-4254
CWE-90 High
No
No
2.2.3-3ubuntu0.11 24.01.2023 SB2023012437
SB2023012440
SB2023012457
and 13 more
#VU56000 - Command injection
CVE-2021-3621
CWE-77 Medium
No
No
1.16.1-1ubuntu1.8, 2.2.3-3ubuntu0.7, 2.4.0-1ubuntu6.1 20.08.2021 SB2021082002
SB2021082206
SB2021083125
and 19 more
#VU17376 - Permissions, Privileges, and Access Controls
CVE-2018-16838
CWE-264 Low
No
No
1.16.1-1ubuntu1.8, 2.2.3-3ubuntu0.7, 2.4.0-1ubuntu6.1 05.02.2019 SB2019020505
SB2019061806
SB2019061909
and 5 more
#VU17121 - Improper Access Control
CVE-2019-3811
CWE-284 Low
No
No
1.16.1-1ubuntu1.8, 2.2.3-3ubuntu0.7, 2.4.0-1ubuntu6.1 22.01.2019 SB2018120315
SB2019040813
SB2019031808
and 4 more
#VU14328 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10852
CWE-200 Low
No
No
1.16.1-1ubuntu1.8, 2.2.3-3ubuntu0.7, 2.4.0-1ubuntu6.1 10.08.2018 SB2018081312
SB2018081019
SB2019011402
and 3 more