CVE

Id
60167  
CVE No.
CVE-2013-0220  
Status
Candidate  
Description
The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
607328 60167 CVE-2013-0220 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=884601  View
607329 60167 CVE-2013-0220 CONFIRM:http://git.fedorahosted.org/cgit/sssd.git/commit/?id=2bd514cfde1938b1e245af11c9b548d58d49b325  View
607330 60167 CVE-2013-0220 CONFIRM:http://git.fedorahosted.org/cgit/sssd.git/commit/?id=30e2585dd46b62aa3a4abdf6de3f40a20e1743ab  View
607331 60167 CVE-2013-0220 CONFIRM:https://fedorahosted.org/sssd/ticket/1781  View
607332 60167 CVE-2013-0220 CONFIRM:https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.4  View
607333 60167 CVE-2013-0220 FEDORA:FEDORA-2013-1795  View
607334 60167 CVE-2013-0220 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098434.html  View
607335 60167 CVE-2013-0220 FEDORA:FEDORA-2013-1826  View
607336 60167 CVE-2013-0220 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098613.html  View
607337 60167 CVE-2013-0220 REDHAT:RHSA-2013:0508  View
607338 60167 CVE-2013-0220 URL:http://rhn.redhat.com/errata/RHSA-2013-0508.html  View
607339 60167 CVE-2013-0220 BID:57539  View
607340 60167 CVE-2013-0220 URL:http://www.securityfocus.com/bid/57539  View
607341 60167 CVE-2013-0220 SECUNIA:51928  View
607342 60167 CVE-2013-0220 URL:http://secunia.com/advisories/51928  View
607343 60167 CVE-2013-0220 SECUNIA:52315  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20377 JVNDB-2013-001952 Drupal 用 User Relationships モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 User Relationships モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-0225 60167 2.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001952.html  View