Vulnerability-Lookup

ubuntu-cve-2025-11561

Vulnerability from osv_ubuntu

Published

2025-10-09 14:15

Modified

2026-07-08 20:47

Summary

Details

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.

Severity

8.8 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2025-11561	REPORT
	https://www.cve.org/CVERecord?id=CVE-2025-11561	REPORT
	https://blog.async.sg/kerberos-ldr	REPORT
	https://access.redhat.com/security/cve/CVE-2025-11561	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libipa-hbac0",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "libnss-sss",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "libpam-sss",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "libsss-idmap0",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "libsss-nss-idmap0",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "libsss-simpleifp0",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "libsss-sudo",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "libwbclient-sssd",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "python-libipa-hbac",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "python-libsss-nss-idmap",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "python-sss",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "python3-libipa-hbac",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "python3-libsss-nss-idmap",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "python3-sss",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "sssd",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "sssd-ad",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "sssd-ad-common",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "sssd-common",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "sssd-dbus",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "sssd-ipa",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "sssd-krb5",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "sssd-krb5-common",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "sssd-ldap",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "sssd-proxy",
            "binary_version": "1.13.4-1ubuntu1.15"
          },
          {
            "binary_name": "sssd-tools",
            "binary_version": "1.13.4-1ubuntu1.15"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "sssd",
        "purl": "pkg:deb/ubuntu/sssd@1.13.4-1ubuntu1.15?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.12.5-2",
        "1.13.1-2",
        "1.13.2-1",
        "1.13.3-1",
        "1.13.4-1",
        "1.13.4-1ubuntu1",
        "1.13.4-1ubuntu1.1",
        "1.13.4-1ubuntu1.2",
        "1.13.4-1ubuntu1.5",
        "1.13.4-1ubuntu1.6",
        "1.13.4-1ubuntu1.7",
        "1.13.4-1ubuntu1.8",
        "1.13.4-1ubuntu1.9",
        "1.13.4-1ubuntu1.10",
        "1.13.4-1ubuntu1.11",
        "1.13.4-1ubuntu1.12",
        "1.13.4-1ubuntu1.13",
        "1.13.4-1ubuntu1.14",
        "1.13.4-1ubuntu1.15"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libipa-hbac0",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "libnss-sss",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "libpam-sss",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "libsss-certmap0",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "libsss-idmap0",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "libsss-nss-idmap0",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "libsss-simpleifp0",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "libsss-sudo",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "libwbclient-sssd",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "python-libipa-hbac",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "python-libsss-nss-idmap",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "python-sss",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "python3-libipa-hbac",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "python3-libsss-nss-idmap",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "python3-sss",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "sssd",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "sssd-ad",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "sssd-ad-common",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "sssd-common",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "sssd-dbus",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "sssd-ipa",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "sssd-kcm",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "sssd-krb5",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "sssd-krb5-common",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "sssd-ldap",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "sssd-proxy",
            "binary_version": "1.16.1-1ubuntu1.8"
          },
          {
            "binary_name": "sssd-tools",
            "binary_version": "1.16.1-1ubuntu1.8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "sssd",
        "purl": "pkg:deb/ubuntu/sssd@1.16.1-1ubuntu1.8?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.15.3-2ubuntu1",
        "1.15.3-3ubuntu1",
        "1.16.0-5ubuntu1",
        "1.16.0-5ubuntu2",
        "1.16.1-1ubuntu1",
        "1.16.1-1ubuntu1.1",
        "1.16.1-1ubuntu1.2",
        "1.16.1-1ubuntu1.3",
        "1.16.1-1ubuntu1.4",
        "1.16.1-1ubuntu1.5",
        "1.16.1-1ubuntu1.6",
        "1.16.1-1ubuntu1.7",
        "1.16.1-1ubuntu1.8"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libipa-hbac0",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "libnss-sss",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "libpam-sss",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "libsss-certmap0",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "libsss-idmap0",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "libsss-nss-idmap0",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "libsss-simpleifp0",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "libsss-sudo",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "libwbclient-sssd",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "python3-libipa-hbac",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "python3-libsss-nss-idmap",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "python3-sss",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "sssd",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "sssd-ad",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "sssd-ad-common",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "sssd-common",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "sssd-dbus",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "sssd-ipa",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "sssd-kcm",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "sssd-krb5",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "sssd-krb5-common",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "sssd-ldap",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "sssd-proxy",
            "binary_version": "2.2.3-3ubuntu0.13"
          },
          {
            "binary_name": "sssd-tools",
            "binary_version": "2.2.3-3ubuntu0.13"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "sssd",
        "purl": "pkg:deb/ubuntu/sssd@2.2.3-3ubuntu0.13?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.2.0-4ubuntu1",
        "2.2.2-1",
        "2.2.2-1ubuntu1",
        "2.2.3-1.1ubuntu1",
        "2.2.3-2",
        "2.2.3-3",
        "2.2.3-3ubuntu0.1",
        "2.2.3-3ubuntu0.2",
        "2.2.3-3ubuntu0.3",
        "2.2.3-3ubuntu0.4",
        "2.2.3-3ubuntu0.6",
        "2.2.3-3ubuntu0.7",
        "2.2.3-3ubuntu0.8",
        "2.2.3-3ubuntu0.9",
        "2.2.3-3ubuntu0.10",
        "2.2.3-3ubuntu0.11",
        "2.2.3-3ubuntu0.12",
        "2.2.3-3ubuntu0.13"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libipa-hbac0",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "libnss-sss",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "libpam-sss",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "libsss-certmap0",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "libsss-idmap0",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "libsss-nss-idmap0",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "libsss-simpleifp0",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "libsss-sudo",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "python3-libipa-hbac",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "python3-libsss-nss-idmap",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "python3-sss",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "sssd",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "sssd-ad",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "sssd-ad-common",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "sssd-common",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "sssd-dbus",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "sssd-ipa",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "sssd-kcm",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "sssd-krb5",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "sssd-krb5-common",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "sssd-ldap",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "sssd-proxy",
            "binary_version": "2.6.3-1ubuntu3.6"
          },
          {
            "binary_name": "sssd-tools",
            "binary_version": "2.6.3-1ubuntu3.6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "sssd",
        "purl": "pkg:deb/ubuntu/sssd@2.6.3-1ubuntu3.6?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.1-2ubuntu4",
        "2.5.2-4ubuntu1",
        "2.5.2-4ubuntu3",
        "2.5.2-4ubuntu4",
        "2.6.1-1ubuntu3",
        "2.6.3-1ubuntu3",
        "2.6.3-1ubuntu3.1",
        "2.6.3-1ubuntu3.2",
        "2.6.3-1ubuntu3.3",
        "2.6.3-1ubuntu3.4",
        "2.6.3-1ubuntu3.5",
        "2.6.3-1ubuntu3.6"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libipa-hbac0t64",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "libnss-sss",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "libpam-sss",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "libsss-certmap0",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "libsss-idmap0",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "libsss-nss-idmap0",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "libsss-sudo",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "python3-libipa-hbac",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "python3-libsss-nss-idmap",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "python3-sss",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd-ad",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd-ad-common",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd-common",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd-dbus",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd-idp",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd-ipa",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd-kcm",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd-krb5",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd-krb5-common",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd-ldap",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd-passkey",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd-proxy",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          },
          {
            "binary_name": "sssd-tools",
            "binary_version": "2.9.4-1.1ubuntu6.6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "sssd",
        "purl": "pkg:deb/ubuntu/sssd@2.9.4-1.1ubuntu6.6?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.9.1-2ubuntu2",
        "2.9.1-2ubuntu3",
        "2.9.2-1ubuntu2",
        "2.9.4-1ubuntu1",
        "2.9.4-1.1ubuntu3",
        "2.9.4-1.1ubuntu5",
        "2.9.4-1.1ubuntu6",
        "2.9.4-1.1ubuntu6.1",
        "2.9.4-1.1ubuntu6.2",
        "2.9.4-1.1ubuntu6.3",
        "2.9.4-1.1ubuntu6.4",
        "2.9.4-1.1ubuntu6.5",
        "2.9.4-1.1ubuntu6.6"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libipa-hbac0t64",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "libnss-sss",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "libpam-sss",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "libsss-certmap0",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "libsss-idmap0",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "libsss-nss-idmap0",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "libsss-sudo",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "python3-libipa-hbac",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "python3-libsss-nss-idmap",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "python3-sss",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd-ad",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd-ad-common",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd-common",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd-dbus",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd-idp",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd-ipa",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd-kcm",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd-krb5",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd-krb5-common",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd-ldap",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd-passkey",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd-proxy",
            "binary_version": "2.10.1-2ubuntu5.3"
          },
          {
            "binary_name": "sssd-tools",
            "binary_version": "2.10.1-2ubuntu5.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "sssd",
        "purl": "pkg:deb/ubuntu/sssd@2.10.1-2ubuntu5.3?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.10.1-2ubuntu4",
        "2.10.1-2ubuntu5",
        "2.10.1-2ubuntu5.1",
        "2.10.1-2ubuntu5.2",
        "2.10.1-2ubuntu5.3"
      ]
    }
  ],
  "aliases": [],
  "details": "A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.",
  "id": "UBUNTU-CVE-2025-11561",
  "modified": "2026-07-08T20:47:26Z",
  "published": "2025-10-09T14:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2025-11561"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11561"
    },
    {
      "type": "REPORT",
      "url": "https://blog.async.sg/kerberos-ldr"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2025-11561"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2025-11561"
  ]
}

CVE-2025-11561 (GCVE-0-2025-11561)

Vulnerability from cvelistv5 – Published: 2025-10-09 13:37 – Updated: 2026-03-19 17:18

Title

Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems

Summary

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-269 - Improper Privilege Management

Assigner

redhat

References

28 references

URL	Tags
https://access.redhat.com/errata/RHSA-2025:19610	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19847	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19848	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19849	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19850	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19851	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19852	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19853	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19854	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19859	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:20954	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:21020	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:21067	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:21329	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:21795	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22256	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22265	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22277	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22529	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22548	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22724	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:23113	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:0316	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:0677	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-11561	vdb-entryx_refsource_REDHAT
https://blog.async.sg/kerberos-ldr
https://bugzilla.redhat.com/show_bug.cgi?id=2402727	issue-trackingx_refsource_REDHAT
https://github.com/SSSD/sssd/issues/8021

Impacted products

30 products

Vendor	Product	Version
		Affected: 0 , ≤ 2.11.1 (semver)
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:2.10.2-3.el10_0.3 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.0
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:2.11.1-2.el10_1.1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:1.16.5-10.el7_9.17 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:2.9.4-5.el8_10.3 , < * (rpm) cpe:/o:redhat:enterprise_linux:8::baseos cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:2.2.3-20.el8_2.3 , < * (rpm) cpe:/o:redhat:rhel_aus:8.2::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:2.4.0-9.el8_4.4 , < * (rpm) cpe:/o:redhat:rhel_eus_long_life:8.4::baseos cpe:/o:redhat:rhel_aus:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 0:2.4.0-9.el8_4.4 , < * (rpm) cpe:/o:redhat:rhel_eus_long_life:8.4::baseos cpe:/o:redhat:rhel_aus:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:2.6.2-4.el8_6.4 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	Unaffected: 0:2.6.2-4.el8_6.4 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	Unaffected: 0:2.6.2-4.el8_6.4 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:2.8.2-4.el8_8.3 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/o:redhat:rhel_tus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:2.8.2-4.el8_8.3 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/o:redhat:rhel_tus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:2.9.7-4.el9_7.1 , < * (rpm) cpe:/o:redhat:enterprise_linux:9::baseos cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 0:2.6.2-4.el9_0.4 , < * (rpm) cpe:/o:redhat:rhel_e4s:9.0::baseos
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:2.8.2-5.el9_2.6 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2::appstream cpe:/o:redhat:rhel_e4s:9.2::baseos
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:2.9.4-6.el9_4.4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.4::crb cpe:/a:redhat:rhel_eus:9.4::appstream cpe:/o:redhat:rhel_eus:9.4::baseos
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:2.9.6-4.el9_6.3 , < * (rpm) cpe:/o:redhat:rhel_eus:9.6::baseos cpe:/a:redhat:rhel_eus:9.6::crb cpe:/a:redhat:rhel_eus:9.6::appstream
Red Hat	Red Hat OpenShift Container Platform 4.12	Unaffected: 412.86.202601061735-0 , < * (rpm) cpe:/a:redhat:openshift:4.12::el8
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 413.92.202601130113-0 , < * (rpm) cpe:/a:redhat:openshift:4.13::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 414.92.202511122212-0 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 415.92.202512100122-0 , < * (rpm) cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 416.94.202512030118-0 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 417.94.202511260612-0 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 418.94.202511170715-0 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 4.19.9.6.202511252219-0 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 4.20.9.6.202511252309-0 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat Ceph Storage 7	Unaffected: sha256:6b79ed10423d954d21dd24c9cb1cf507f6e02c2942ace7fa30cf7af2ffaeb631 , < * (rpm) cpe:/a:redhat:ceph_storage:7::el9
Red Hat	Red Hat Ceph Storage 8	Unaffected: sha256:04a48d31f7336e0d5958eed1ddb1a117148f791baccef4e6e08943181e6794c8 , < * (rpm) cpe:/a:redhat:ceph_storage:8::el9
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Date Public

2025-10-09 00:00

Credits

Red Hat would like to thank Zavier Lee for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-11561",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-10T03:55:25.417800Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T17:47:57.941Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://sssd.io/",
          "defaultStatus": "unaffected",
          "packageName": "sssd",
          "versions": [
            {
              "lessThanOrEqual": "2.11.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.0"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.10.2-3.el10_0.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.1"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.11.1-2.el10_1.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:7"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.16.5-10.el7_9.17",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos",
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.9.4-5.el8_10.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos",
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.9.4-5.el8_10.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.2.3-20.el8_2.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos",
            "cpe:/o:redhat:rhel_aus:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.4.0-9.el8_4.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos",
            "cpe:/o:redhat:rhel_aus:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.4.0-9.el8_4.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_e4s:8.6::baseos",
            "cpe:/o:redhat:rhel_tus:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.6.2-4.el8_6.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_e4s:8.6::baseos",
            "cpe:/o:redhat:rhel_tus:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.6.2-4.el8_6.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_e4s:8.6::baseos",
            "cpe:/o:redhat:rhel_tus:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.6.2-4.el8_6.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.8::baseos",
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream",
            "cpe:/o:redhat:rhel_tus:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.8.2-4.el8_8.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.8::baseos",
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream",
            "cpe:/o:redhat:rhel_tus:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.8.2-4.el8_8.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.9.7-4.el9_7.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.9.7-4.el9_7.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:9.0::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.6.2-4.el9_0.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.2::appstream",
            "cpe:/o:redhat:rhel_e4s:9.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.8.2-5.el9_2.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.4::crb",
            "cpe:/a:redhat:rhel_eus:9.4::appstream",
            "cpe:/o:redhat:rhel_eus:9.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.9.4-6.el9_4.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:9.6::baseos",
            "cpe:/a:redhat:rhel_eus:9.6::crb",
            "cpe:/a:redhat:rhel_eus:9.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.9.6-4.el9_6.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.12::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.12",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "412.86.202601061735-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.13::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.13",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "413.92.202601130113-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.14",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "414.92.202511122212-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "415.92.202512100122-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "416.94.202512030118-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "417.94.202511260612-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "418.94.202511170715-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.19::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.19",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.19.9.6.202511252219-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.20::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.20",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.20.9.6.202511252309-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:7::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhceph/rhceph-7-rhel9",
          "product": "Red Hat Ceph Storage 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:6b79ed10423d954d21dd24c9cb1cf507f6e02c2942ace7fa30cf7af2ffaeb631",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhceph/rhceph-8-rhel9",
          "product": "Red Hat Ceph Storage 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:04a48d31f7336e0d5958eed1ddb1a117148f791baccef4e6e08943181e6794c8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "sssd",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Zavier Lee for reporting this issue."
        }
      ],
      "datePublic": "2025-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-19T17:18:09.567Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2025:19610",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19610"
        },
        {
          "name": "RHSA-2025:19847",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19847"
        },
        {
          "name": "RHSA-2025:19848",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19848"
        },
        {
          "name": "RHSA-2025:19849",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19849"
        },
        {
          "name": "RHSA-2025:19850",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19850"
        },
        {
          "name": "RHSA-2025:19851",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19851"
        },
        {
          "name": "RHSA-2025:19852",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19852"
        },
        {
          "name": "RHSA-2025:19853",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19853"
        },
        {
          "name": "RHSA-2025:19854",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19854"
        },
        {
          "name": "RHSA-2025:19859",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19859"
        },
        {
          "name": "RHSA-2025:20954",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:20954"
        },
        {
          "name": "RHSA-2025:21020",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:21020"
        },
        {
          "name": "RHSA-2025:21067",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:21067"
        },
        {
          "name": "RHSA-2025:21329",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:21329"
        },
        {
          "name": "RHSA-2025:21795",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:21795"
        },
        {
          "name": "RHSA-2025:22256",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:22256"
        },
        {
          "name": "RHSA-2025:22265",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:22265"
        },
        {
          "name": "RHSA-2025:22277",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:22277"
        },
        {
          "name": "RHSA-2025:22529",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:22529"
        },
        {
          "name": "RHSA-2025:22548",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:22548"
        },
        {
          "name": "RHSA-2025:22724",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:22724"
        },
        {
          "name": "RHSA-2025:23113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:23113"
        },
        {
          "name": "RHSA-2026:0316",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:0316"
        },
        {
          "name": "RHSA-2026:0677",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:0677"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2025-11561"
        },
        {
          "url": "https://blog.async.sg/kerberos-ldr"
        },
        {
          "name": "RHBZ#2402727",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2402727"
        },
        {
          "url": "https://github.com/SSSD/sssd/issues/8021"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2025-10-09T12:57:29.851Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2025-10-09T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems",
      "workarounds": [
        {
          "lang": "en",
          "value": "To mitigate this issue, ensure the SSSD Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is configured and the an2ln plugin is disabled by adding \"disable = an2ln\" in a krb5 include file, for example /var/lib/sss/pubconf/krb5.include.d/localauth_plugin and make sure it is included in the Kerberos configuration. Apply vendor updates and follow Red Hat guidance for SSSD hardening."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-269: Improper Privilege Management"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2025-11561",
    "datePublished": "2025-10-09T13:37:53.089Z",
    "dateReserved": "2025-10-09T13:03:30.189Z",
    "dateUpdated": "2026-03-19T17:18:09.567Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

ubuntu-cve-2025-11561

Vulnerability from osv_ubuntu

CVE-2025-11561 (GCVE-0-2025-11561)

Tags

Sightings

Nomenclature