https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:49:16 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:3151 <p><strong>Affected:</strong> AlmaLinux:8: libsss_nss_idmap-devel</p> <p>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.</p> <p>Security Fix(es):</p> <p>* sssd: shell command injection in sssctl (CVE-2021-3621)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libsss_nss_idmap-devel</p> <p>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.</p> <p>Security Fix(es):</p> <p>* sssd: shell command injection in sssctl (CVE-2021-3621)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2021:3151 https://cve.radiocsirt.org/vuln/bdu:2023-07637 bdu:2023-07637 https://cve.radiocsirt.org/vuln/bdu:2023-07637 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0051 certfr-2023-avi-0051 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0051 https://cve.radiocsirt.org/vuln/euvd-2026-258006 EUVD-2026-258006 https://cve.radiocsirt.org/vuln/euvd-2026-258006 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3621 <p>A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> <p>A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3621 https://cve.radiocsirt.org/vuln/ghsa-g527-g4q2-57xc <p>A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> <p>A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> https://cve.radiocsirt.org/vuln/ghsa-g527-g4q2-57xc https://cve.radiocsirt.org/vuln/gsd-2021-3621 gsd-2021-3621 https://cve.radiocsirt.org/vuln/gsd-2021-3621 https://cve.radiocsirt.org/vuln/oesa-2021-1340 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: sssd, openEuler:20.03-LTS-SP2: sssd</p> <p>SSSD provides a set of daemons to manage access to remote directories and authentication mechanisms such as LDAP, Kerberos or FreeIPA. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. Security Fix(es): A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2021-3621)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: sssd, openEuler:20.03-LTS-SP2: sssd</p> <p>SSSD provides a set of daemons to manage access to remote directories and authentication mechanisms such as LDAP, Kerberos or FreeIPA. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. Security Fix(es): A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2021-3621)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1340 https://cve.radiocsirt.org/vuln/opensuse-su-2021:2941-1 <p>Security update for sssd</p> <p>Security update for sssd</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:2941-1 https://cve.radiocsirt.org/vuln/rhsa-2021:3178 <p>sssd: shell command injection in sssctl</p> <p>sssd: shell command injection in sssctl</p> https://cve.radiocsirt.org/vuln/rhsa-2021:3178 https://cve.radiocsirt.org/vuln/suse-ru-2021:3185-1 <p>Recommended update for sssd</p> <p>Recommended update for sssd</p> https://cve.radiocsirt.org/vuln/suse-ru-2021:3185-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3621 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: sssd, Ubuntu:20.04:LTS: sssd, Ubuntu:22.04:LTS: sssd</p> <p>A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: sssd, Ubuntu:20.04:LTS: sssd, Ubuntu:22.04:LTS: sssd</p> <p>A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3621 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1001 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1001