Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.
Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.
A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the con
Medium(5.5)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By
Medium(4.7)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system handles used for open connections). By opening and m
Medium(4.7)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed ou
Medium(6.2)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vuln
Medium(5.3)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifiers and comparing only short usernames. An
Medium(6.8)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggable Authentication Module (PAM) request when passkey authentication is enabled. Du
Medium(6.2)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized
Medium(5.5)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication Module (PAM) request containing a zero-length authentication token to the r
Medium(5.5)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch (NSS) responder. Because the negative cache does not limit t
Medium(5.5)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before being included in Microsoft Graph Open Data P
Medium(4.4)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services. When handling Generic Security Services Application Programming Interface (GSSA
Medium(4.7)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks an expected Security Identifier (SID) extension. In deployments configured with S
Medium(5.9)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer under
Medium(5.5)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP (Lightweight Directory Access Protocol) environments, an expired-password war
Medium(6.8)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A lo
Medium(5.8)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Denial of Service (DoS) by maintaining a persistent connection and repeatedly stori
Medium(5.5)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protocol) shadow attributes, SSSD fails to treat an expiration value of zero as an expi
Medium(5.4)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder during Kerberos ticket-granting ticket (TGT) renewal, where a deferred callback acces
Medium(4.7)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache in
Medium(5.5)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
