CVE-2018-16883 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-16883 Interim 1 21 2023-01-19T01:55:32Z current 2021-05-30T14:17:00Z 2023-01-19T01:55:32Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-16883 sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitive information were stored in the user directory, this could be inadvertently disclosed to local attackers. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES for SAP Applications 11 SP3 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP3 libipa_hbac0 libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 libsss_simpleifp0 libsss_sudo python-sssd-config sssd sssd-32bit sssd-ad sssd-ipa sssd-krb5 sssd-krb5-common sssd-ldap sssd-proxy sssd-tools sssd as a component of SLES for SAP Applications 11 SP3 libipa_hbac0 as a component of SUSE Linux Enterprise Desktop 12 SP3 libsss_idmap0 as a component of SUSE Linux Enterprise Desktop 12 SP3 libsss_nss_idmap0 as a component of SUSE Linux Enterprise Desktop 12 SP3 libsss_sudo as a component of SUSE Linux Enterprise Desktop 12 SP3 python-sssd-config as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-32bit as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-ad as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-ipa as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-krb5 as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-krb5-common as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-ldap as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-proxy as a component of SUSE Linux Enterprise Desktop 12 SP3 sssd-tools as a component of SUSE Linux Enterprise Desktop 12 SP3 libipa_hbac0 as a component of SUSE Linux Enterprise Desktop 12 SP4 libsss_certmap0 as a component of SUSE Linux Enterprise Desktop 12 SP4 libsss_idmap0 as a component of SUSE Linux Enterprise Desktop 12 SP4 libsss_nss_idmap0 as a component of SUSE Linux Enterprise Desktop 12 SP4 libsss_simpleifp0 as a component of SUSE Linux Enterprise Desktop 12 SP4 python-sssd-config as a component of SUSE Linux Enterprise Desktop 12 SP4 sssd as a component of SUSE Linux Enterprise Desktop 12 SP4 sssd-32bit as a component of SUSE Linux Enterprise Desktop 12 SP4 sssd-ad as a component of SUSE Linux Enterprise Desktop 12 SP4 sssd-ipa as a component of SUSE Linux Enterprise Desktop 12 SP4 sssd-krb5 as a component of SUSE Linux Enterprise Desktop 12 SP4 sssd-krb5-common as a component of SUSE Linux Enterprise Desktop 12 SP4 sssd-ldap as a component of SUSE Linux Enterprise Desktop 12 SP4 sssd-proxy as a component of SUSE Linux Enterprise Desktop 12 SP4 sssd-tools as a component of SUSE Linux Enterprise Desktop 12 SP4 sssd as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 sssd as a component of SUSE Linux Enterprise Server 11 SP3 LTSS sssd as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata libsss_idmap0 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS python-sssd-config as a component of SUSE Linux Enterprise Server 11 SP4-LTSS sssd as a component of SUSE Linux Enterprise Server 11 SP4-LTSS sssd-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS sssd-tools as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libipa_hbac0 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libsss_idmap0 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libsss_sudo as a component of SUSE Linux Enterprise Server 12 SP2-LTSS python-sssd-config as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-ad as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-ipa as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-krb5 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-krb5-common as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-ldap as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-proxy as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sssd-tools as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libipa_hbac0 as a component of SUSE Linux Enterprise Server 12 SP3 libsss_idmap0 as a component of SUSE Linux Enterprise Server 12 SP3 libsss_nss_idmap0 as a component of SUSE Linux Enterprise Server 12 SP3 libsss_sudo as a component of SUSE Linux Enterprise Server 12 SP3 python-sssd-config as a component of SUSE Linux Enterprise Server 12 SP3 sssd as a component of SUSE Linux Enterprise Server 12 SP3 sssd-32bit as a component of SUSE Linux Enterprise Server 12 SP3 sssd-ad as a component of SUSE Linux Enterprise Server 12 SP3 sssd-ipa as a component of SUSE Linux Enterprise Server 12 SP3 sssd-krb5 as a component of SUSE Linux Enterprise Server 12 SP3 sssd-krb5-common as a component of SUSE Linux Enterprise Server 12 SP3 sssd-ldap as a component of SUSE Linux Enterprise Server 12 SP3 sssd-proxy as a component of SUSE Linux Enterprise Server 12 SP3 sssd-tools as a component of SUSE Linux Enterprise Server 12 SP3 libipa_hbac0 as a component of SUSE Linux Enterprise Server 12 SP4 libsss_certmap0 as a component of SUSE Linux Enterprise Server 12 SP4 libsss_idmap0 as a component of SUSE Linux Enterprise Server 12 SP4 libsss_nss_idmap0 as a component of SUSE Linux Enterprise Server 12 SP4 libsss_simpleifp0 as a component of SUSE Linux Enterprise Server 12 SP4 python-sssd-config as a component of SUSE Linux Enterprise Server 12 SP4 sssd as a component of SUSE Linux Enterprise Server 12 SP4 sssd-32bit as a component of SUSE Linux Enterprise Server 12 SP4 sssd-ad as a component of SUSE Linux Enterprise Server 12 SP4 sssd-ipa as a component of SUSE Linux Enterprise Server 12 SP4 sssd-krb5 as a component of SUSE Linux Enterprise Server 12 SP4 sssd-krb5-common as a component of SUSE Linux Enterprise Server 12 SP4 sssd-ldap as a component of SUSE Linux Enterprise Server 12 SP4 sssd-proxy as a component of SUSE Linux Enterprise Server 12 SP4 sssd-tools as a component of SUSE Linux Enterprise Server 12 SP4 libipa_hbac0 as a component of SUSE Linux Enterprise Server 12-LTSS libsss_idmap0 as a component of SUSE Linux Enterprise Server 12-LTSS libsss_sudo as a component of SUSE Linux Enterprise Server 12-LTSS python-sssd-config as a component of SUSE Linux Enterprise Server 12-LTSS sssd as a component of SUSE Linux Enterprise Server 12-LTSS sssd-32bit as a component of SUSE Linux Enterprise Server 12-LTSS sssd-ad as a component of SUSE Linux Enterprise Server 12-LTSS sssd-ipa as a component of SUSE Linux Enterprise Server 12-LTSS sssd-krb5 as a component of SUSE Linux Enterprise Server 12-LTSS sssd-krb5-common as a component of SUSE Linux Enterprise Server 12-LTSS sssd-ldap as a component of SUSE Linux Enterprise Server 12-LTSS sssd-proxy as a component of SUSE Linux Enterprise Server 12-LTSS sssd-tools as a component of SUSE Linux Enterprise Server 12-LTSS sssd as a component of SUSE Linux Enterprise Server for SAP Applications 12 libipa_hbac0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libsss_idmap0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libsss_nss_idmap0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libsss_sudo as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 python-sssd-config as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-ad as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-ipa as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-krb5 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-krb5-common as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-ldap as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-proxy as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd-tools as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitive information were stored in the user directory, this could be inadvertently disclosed to local attackers. CVE-2018-16883 SLES for SAP Applications 11 SP3:sssd SUSE Linux Enterprise Desktop 12 SP3:libipa_hbac0 SUSE Linux Enterprise Desktop 12 SP3:libsss_idmap0 SUSE Linux Enterprise Desktop 12 SP3:libsss_nss_idmap0 SUSE Linux Enterprise Desktop 12 SP3:libsss_sudo SUSE Linux Enterprise Desktop 12 SP3:python-sssd-config SUSE Linux Enterprise Desktop 12 SP3:sssd SUSE Linux Enterprise Desktop 12 SP3:sssd-32bit SUSE Linux Enterprise Desktop 12 SP3:sssd-ad SUSE Linux Enterprise Desktop 12 SP3:sssd-ipa SUSE Linux Enterprise Desktop 12 SP3:sssd-krb5 SUSE Linux Enterprise Desktop 12 SP3:sssd-krb5-common SUSE Linux Enterprise Desktop 12 SP3:sssd-ldap SUSE Linux Enterprise Desktop 12 SP3:sssd-proxy SUSE Linux Enterprise Desktop 12 SP3:sssd-tools SUSE Linux Enterprise Desktop 12 SP4:libipa_hbac0 SUSE Linux Enterprise Desktop 12 SP4:libsss_certmap0 SUSE Linux Enterprise Desktop 12 SP4:libsss_idmap0 SUSE Linux Enterprise Desktop 12 SP4:libsss_nss_idmap0 SUSE Linux Enterprise Desktop 12 SP4:libsss_simpleifp0 SUSE Linux Enterprise Desktop 12 SP4:python-sssd-config SUSE Linux Enterprise Desktop 12 SP4:sssd SUSE Linux Enterprise Desktop 12 SP4:sssd-32bit SUSE Linux Enterprise Desktop 12 SP4:sssd-ad SUSE Linux Enterprise Desktop 12 SP4:sssd-ipa SUSE Linux Enterprise Desktop 12 SP4:sssd-krb5 SUSE Linux Enterprise Desktop 12 SP4:sssd-krb5-common SUSE Linux Enterprise Desktop 12 SP4:sssd-ldap SUSE Linux Enterprise Desktop 12 SP4:sssd-proxy SUSE Linux Enterprise Desktop 12 SP4:sssd-tools SUSE Linux Enterprise High Performance Computing 12 SP4:sssd SUSE Linux Enterprise Server 11 SP3 LTSS:sssd SUSE Linux Enterprise Server 11 SP3 for Teradata:sssd SUSE Linux Enterprise Server 11 SP4-LTSS:libsss_idmap0 SUSE Linux Enterprise Server 11 SP4-LTSS:python-sssd-config SUSE Linux Enterprise Server 11 SP4-LTSS:sssd SUSE Linux Enterprise Server 11 SP4-LTSS:sssd-32bit SUSE Linux Enterprise Server 11 SP4-LTSS:sssd-tools SUSE Linux Enterprise Server 12 SP2-LTSS:libipa_hbac0 SUSE Linux Enterprise Server 12 SP2-LTSS:libsss_idmap0 SUSE Linux Enterprise Server 12 SP2-LTSS:libsss_sudo SUSE Linux Enterprise Server 12 SP2-LTSS:python-sssd-config SUSE Linux Enterprise Server 12 SP2-LTSS:sssd SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-32bit SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-ad SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-ipa SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-krb5 SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-krb5-common SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-ldap SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-proxy SUSE Linux Enterprise Server 12 SP2-LTSS:sssd-tools SUSE Linux Enterprise Server 12 SP3:libipa_hbac0 SUSE Linux Enterprise Server 12 SP3:libsss_idmap0 SUSE Linux Enterprise Server 12 SP3:libsss_nss_idmap0 SUSE Linux Enterprise Server 12 SP3:libsss_sudo SUSE Linux Enterprise Server 12 SP3:python-sssd-config SUSE Linux Enterprise Server 12 SP3:sssd SUSE Linux Enterprise Server 12 SP3:sssd-32bit SUSE Linux Enterprise Server 12 SP3:sssd-ad SUSE Linux Enterprise Server 12 SP3:sssd-ipa SUSE Linux Enterprise Server 12 SP3:sssd-krb5 SUSE Linux Enterprise Server 12 SP3:sssd-krb5-common SUSE Linux Enterprise Server 12 SP3:sssd-ldap SUSE Linux Enterprise Server 12 SP3:sssd-proxy SUSE Linux Enterprise Server 12 SP3:sssd-tools SUSE Linux Enterprise Server 12 SP4:libipa_hbac0 SUSE Linux Enterprise Server 12 SP4:libsss_certmap0 SUSE Linux Enterprise Server 12 SP4:libsss_idmap0 SUSE Linux Enterprise Server 12 SP4:libsss_nss_idmap0 SUSE Linux Enterprise Server 12 SP4:libsss_simpleifp0 SUSE Linux Enterprise Server 12 SP4:python-sssd-config SUSE Linux Enterprise Server 12 SP4:sssd SUSE Linux Enterprise Server 12 SP4:sssd-32bit SUSE Linux Enterprise Server 12 SP4:sssd-ad SUSE Linux Enterprise Server 12 SP4:sssd-ipa SUSE Linux Enterprise Server 12 SP4:sssd-krb5 SUSE Linux Enterprise Server 12 SP4:sssd-krb5-common SUSE Linux Enterprise Server 12 SP4:sssd-ldap SUSE Linux Enterprise Server 12 SP4:sssd-proxy SUSE Linux Enterprise Server 12 SP4:sssd-tools SUSE Linux Enterprise Server 12-LTSS:libipa_hbac0 SUSE Linux Enterprise Server 12-LTSS:libsss_idmap0 SUSE Linux Enterprise Server 12-LTSS:libsss_sudo SUSE Linux Enterprise Server 12-LTSS:python-sssd-config SUSE Linux Enterprise Server 12-LTSS:sssd SUSE Linux Enterprise Server 12-LTSS:sssd-32bit SUSE Linux Enterprise Server 12-LTSS:sssd-ad SUSE Linux Enterprise Server 12-LTSS:sssd-ipa SUSE Linux Enterprise Server 12-LTSS:sssd-krb5 SUSE Linux Enterprise Server 12-LTSS:sssd-krb5-common SUSE Linux Enterprise Server 12-LTSS:sssd-ldap SUSE Linux Enterprise Server 12-LTSS:sssd-proxy SUSE Linux Enterprise Server 12-LTSS:sssd-tools SUSE Linux Enterprise Server for SAP Applications 12 SP3:libipa_hbac0 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsss_idmap0 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsss_nss_idmap0 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsss_sudo SUSE Linux Enterprise Server for SAP Applications 12 SP3:python-sssd-config SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-ad SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-ipa SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-krb5 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-krb5-common SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-ldap SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-proxy SUSE Linux Enterprise Server for SAP Applications 12 SP3:sssd-tools SUSE Linux Enterprise Server for SAP Applications 12:sssd low 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N 2.5 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N