Approved changes feed: RSS · Atom

cpe:2.3:a:fedoraproject:sssd:1.2.1:*:*:*:*:*:*:*

part: a version: 1.2.1 update: *

VendorFedoraproject (edb280c5-6017-5a8b-8553-28ce724531a7)
ProductSssd (b7a5aa9a-3cdc-5470-8c42-ec356f4f4e7e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/sssd purl2cpe 2026-06-01 10:15:31.032484
pkg:deb/ubuntu/sssd purl2cpe 2026-06-01 10:15:31.032485
pkg:github/sssd/sssd purl2cpe 2026-06-01 10:15:31.032486
pkg:rpm/fedora/sssd purl2cpe 2026-06-01 10:15:31.032488
pkg:rpm/opensuse/sssd purl2cpe 2026-06-01 10:15:31.032489

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-0220 vulnerable 2026-06-03 14:32:42.086290 Details available
The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.
Published: 2013-02-24T19:00:00.000Z
Updated: 2024-08-06T14:18:09.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0219 vulnerable 2026-06-03 14:32:42.061102 Details available
System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.
Published: 2013-02-24T19:00:00.000Z
Updated: 2024-08-06T14:18:09.487Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.