The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsss_nss_idmap-devel | May 4, 2022 | Dec 23, 2021 |
| Amazon Linux Ami 2 | — | Upgrade libipa_hbac-develUpgrade python-sss-murmurUpgrade sssd-libwbclient-develUpgrade sssd-ldapUpgrade python-libsss_nss_idmapUpgrade sssd-libwbclientUpgrade python-libipa_hbacUpgrade libsss_idmap-develUpgrade sssd-toolsUpgrade sssd-kcmUpgrade sssd-adUpgrade sssd-krb5-commonUpgrade libsss_autofsUpgrade sssd-dbusUpgrade libsss_simpleifp-develUpgrade sssd-common-pacUpgrade libsss_certmap-develUpgrade libsss_nss_idmap-develUpgrade sssd-commonUpgrade libsss_idmapUpgrade python-sssdconfigUpgrade sssd-winbind-idmapUpgrade libipa_hbacUpgrade sssd-clientUpgrade libsss_certmapUpgrade sssd-ipaUpgrade sssdUpgrade libsss_nss_idmapUpgrade sssd-krb5Upgrade sssd-polkit-rulesUpgrade sssd-debuginfoUpgrade sssd-proxyUpgrade libsss_sudoUpgrade libsss_simpleifpUpgrade python-sss | Oct 7, 2021 | Oct 7, 2021 |
| Amazon_linux | — | Upgrade sssd | Oct 5, 2021 | Aug 17, 2021 |
| Centos_linux | — | Upgrade sssd-libwbclient-develUpgrade sssd-nfs-idmapUpgrade sssd-krb5-commonUpgrade libsss_certmapUpgrade python-libsss_nss_idmapUpgrade sssdUpgrade libsss_simpleifpUpgrade python3-libsss_nss_idmapUpgrade sssd-ldap-debuginfoUpgrade sssd-adUpgrade sssd-krb5-debuginfoUpgrade libsss_autofs-debuginfoUpgrade python-sss-murmurUpgrade sssd-kcmUpgrade sssd-tools-debuginfoUpgrade sssd-proxy-debuginfoUpgrade sssd-ldapUpgrade sssd-krb5Upgrade sssd-proxyUpgrade sssd-kcm-debuginfoUpgrade sssd-toolsUpgrade libsss_certmap-develUpgrade sssd-debugsourceUpgrade libsss_simpleifp-develUpgrade python3-libipa_hbac-debuginfoUpgrade libsss_sudo-debuginfoUpgrade python3-sssUpgrade libsss_autofsUpgrade sssd-libwbclient-debuginfoUpgrade libsss_sudoUpgrade sssd-dbusUpgrade sssd-dbus-debuginfoUpgrade sssd-polkit-rulesUpgrade sssd-commonUpgrade python3-libsss_nss_idmap-debuginfoUpgrade sssd-krb5-common-debuginfoUpgrade python3-sss-murmur-debuginfoUpgrade sssd-common-debuginfoUpgrade python3-sss-murmurUpgrade python3-libipa_hbacUpgrade libipa_hbac-develUpgrade sssd-client-debuginfoUpgrade sssd-ipa-debuginfoUpgrade libsss_nss_idmap-develUpgrade libsss_nss_idmapUpgrade libsss_idmap-debuginfoUpgrade libsss_idmapUpgrade sssd-debuginfoUpgrade sssd-common-pac-debuginfoUpgrade sssd-ad-debuginfoUpgrade python-sssdconfigUpgrade sssd-common-pacUpgrade libipa_hbacUpgrade sssd-libwbclientUpgrade sssd-ipaUpgrade python3-sssdconfigUpgrade libsss_simpleifp-debuginfoUpgrade python-sssUpgrade sssd-clientUpgrade libsss_nss_idmap-debuginfoUpgrade libsss_certmap-debuginfoUpgrade libipa_hbac-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade sssd-winbind-idmapUpgrade sssd-nfs-idmap-debuginfoUpgrade python3-sss-debuginfoUpgrade python-libipa_hbacUpgrade libsss_idmap-devel | Aug 17, 2021 | Aug 16, 2021 |
| Debian | — | Upgrade sssd | Sep 17, 2021 | Sep 17, 2021 |
| Gentoo Linux | — | Upgrade sys-auth/sssd. | Jul 3, 2024 | Dec 23, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsss_certmapUpgrade sssd-krb5-commonUpgrade sssd-ldapUpgrade sssd-ipaUpgrade python-libipa_hbacUpgrade sssd-common-pacUpgrade python-sssdconfigUpgrade python-sss-murmurUpgrade sssd-dbusUpgrade sssdUpgrade libipa_hbacUpgrade sssd-adUpgrade python-libsss_nss_idmapUpgrade libsss_sudoUpgrade sssd-commonUpgrade python-sssUpgrade sssd-toolsUpgrade libsss_nss_idmapUpgrade sssd-clientUpgrade sssd-libwbclientUpgrade sssd-proxyUpgrade sssd-krb5Upgrade libsss_idmapUpgrade libsss_autofsUpgrade libsss_simpleifp | Nov 12, 2021 | Nov 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssd-commonUpgrade sssd-common-pacUpgrade libsss_autofsUpgrade sssd-adUpgrade python2-sssUpgrade python2-libipa_hbacUpgrade python3-sssUpgrade libsss_idmapUpgrade python2-sssdconfigUpgrade sssdUpgrade sssd-ldapUpgrade sssd-winbind-idmapUpgrade sssd-toolsUpgrade sssd-dbusUpgrade sssd-krb5-commonUpgrade sssd-kcmUpgrade sssd-krb5Upgrade python3-sss-murmurUpgrade libsss_simpleifpUpgrade python2-libsss_nss_idmapUpgrade python3-libsss_nss_idmapUpgrade libsss_nss_idmapUpgrade libsss_certmapUpgrade sssd-proxyUpgrade sssd-ipaUpgrade libipa_hbacUpgrade sssd-libwbclientUpgrade libsss_sudoUpgrade python3-sssdconfigUpgrade python2-sss-murmurUpgrade sssd-nfs-idmapUpgrade sssd-clientUpgrade python3-libipa_hbac | Nov 2, 2021 | Nov 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sssdUpgrade python3-sssd | Nov 12, 2021 | Nov 2, 2021 |
| Oracle_linux | — | Upgrade sssd-adUpgrade sssd-proxyUpgrade libsss_autofsUpgrade sssd-ldapUpgrade python3-libipa_hbacUpgrade libsss_simpleifp-develUpgrade sssd-dbusUpgrade sssd-winbind-idmapUpgrade python3-sss-murmurUpgrade sssd-commonUpgrade libsss_nss_idmap-develUpgrade sssd-libwbclientUpgrade libsss_idmapUpgrade python3-sssUpgrade sssd-common-pacUpgrade sssd-toolsUpgrade python-libipa_hbacUpgrade sssd-krb5-commonUpgrade python-libsss_nss_idmapUpgrade python-sss-murmurUpgrade sssd-libwbclient-develUpgrade sssdUpgrade libsss_certmap-develUpgrade sssd-ipaUpgrade python-sssdconfigUpgrade libsss_sudoUpgrade libsss_certmapUpgrade sssd-clientUpgrade python-sssUpgrade sssd-nfs-idmapUpgrade libsss_idmap-develUpgrade libipa_hbacUpgrade sssd-polkit-rulesUpgrade sssd-kcmUpgrade python3-libsss_nss_idmapUpgrade sssd-krb5Upgrade libsss_simpleifpUpgrade libipa_hbac-develUpgrade libsss_nss_idmapUpgrade python3-sssdconfig | Aug 17, 2021 | Aug 16, 2021 |
| Redhat_linux | — | Upgrade sssd-libwbclientUpgrade sssd-ad-debuginfoUpgrade python3-sss-debuginfoUpgrade sssd-debuginfoUpgrade libsss_autofsUpgrade sssd-tools-debuginfoUpgrade libsss_certmapUpgrade libsss_certmap-debuginfoUpgrade sssd-common-pacUpgrade sssd-dbusUpgrade sssd-common-debuginfoUpgrade python3-sssdconfigUpgrade libsss_simpleifp-debuginfoUpgrade sssd-proxyUpgrade sssd-clientUpgrade libsss_autofs-debuginfoUpgrade libipa_hbacUpgrade sssd-nfs-idmap-debuginfoUpgrade sssd-ldap-debuginfoUpgrade libsss_idmapUpgrade sssd-debugsourceUpgrade sssd-proxy-debuginfoUpgrade python3-sss-murmurUpgrade sssd-krb5Upgrade libsss_nss_idmapUpgrade sssd-krb5-common-debuginfoUpgrade python3-libipa_hbacUpgrade sssd-nfs-idmapUpgrade sssd-dbus-debuginfoUpgrade sssd-commonUpgrade sssd-toolsUpgrade libipa_hbac-debuginfoUpgrade sssd-krb5-commonUpgrade libsss_nss_idmap-develUpgrade sssd-ldapUpgrade libsss_idmap-develUpgrade sssd-krb5-debuginfoUpgrade python3-sss-murmur-debuginfoUpgrade libsss_sudoUpgrade sssd-ipa-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade libsss_idmap-debuginfoUpgrade sssd-client-debuginfoUpgrade sssd-libwbclient-develUpgrade sssd-adUpgrade python-libipa_hbacUpgrade libipa_hbac-develUpgrade sssd-kcmUpgrade python-sssdconfigUpgrade libsss_simpleifp-develUpgrade libsss_certmap-develUpgrade python-sss-murmurUpgrade sssd-ipaUpgrade sssd-winbind-idmapUpgrade libsss_sudo-debuginfoUpgrade python-sssUpgrade sssd-libwbclient-debuginfoUpgrade python3-libipa_hbac-debuginfoUpgrade python-libsss_nss_idmapUpgrade libsss_nss_idmap-debuginfoUpgrade sssd-kcm-debuginfoUpgrade sssdNo solution existsUpgrade sssd-polkit-rulesUpgrade python3-libsss_nss_idmapUpgrade libsss_simpleifpUpgrade sssd-common-pac-debuginfoUpgrade python3-sssUpgrade python3-libsss_nss_idmap-debuginfo | Aug 17, 2021 | Aug 16, 2021 |
| Rocky_linux | — | Upgrade sssd-libwbclientUpgrade libsss_autofsUpgrade sssd-nfs-idmapUpgrade python3-libsss_nss_idmapUpgrade python3-libsss_nss_idmap-debuginfoUpgrade sssd-debugsourceUpgrade sssd-krb5Upgrade sssd-clientUpgrade sssd-krb5-common-debuginfoUpgrade python3-sss-debuginfoUpgrade sssd-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade sssd-ipa-debuginfoUpgrade sssd-common-debuginfoUpgrade sssd-tools-debuginfoUpgrade sssdUpgrade sssd-winbind-idmapUpgrade sssd-nfs-idmap-debuginfoUpgrade libsss_simpleifpUpgrade python3-libipa_hbacUpgrade sssd-proxy-debuginfoUpgrade sssd-ad-debuginfoUpgrade libsss_nss_idmapUpgrade libsss_sudo-debuginfoUpgrade sssd-toolsUpgrade libsss_idmapUpgrade sssd-proxyUpgrade sssd-dbus-debuginfoUpgrade sssd-ldap-debuginfoUpgrade sssd-ldapUpgrade libipa_hbacUpgrade sssd-client-debuginfoUpgrade sssd-common-pac-debuginfoUpgrade libsss_autofs-debuginfoUpgrade sssd-commonUpgrade python3-sss-murmur-debuginfoUpgrade sssd-ipaUpgrade libsss_nss_idmap-develUpgrade python3-libipa_hbac-debuginfoUpgrade libsss_certmapUpgrade libipa_hbac-debuginfoUpgrade sssd-kcm-debuginfoUpgrade sssd-krb5-commonUpgrade sssd-kcmUpgrade sssd-dbusUpgrade sssd-adUpgrade libsss_nss_idmap-debuginfoUpgrade libsss_certmap-debuginfoUpgrade libsss_sudoUpgrade sssd-krb5-debuginfoUpgrade sssd-polkit-rulesUpgrade sssd-libwbclient-debuginfoUpgrade sssd-common-pacUpgrade libsss_idmap-debuginfoUpgrade python3-sss-murmurUpgrade python3-sssUpgrade libsss_simpleifp-debuginfo | May 5, 2022 | Dec 23, 2021 |
| Suse | — | Upgrade sssd-ldapUpgrade sssd-krb5-commonUpgrade libipa_hbac-develUpgrade sssd-wbclient-develUpgrade sssd-common-32bitUpgrade sssd-dbusUpgrade libsss_simpleifp-develUpgrade python3-sss_nss_idmapUpgrade sssd-kcmUpgrade python3-sss-murmurUpgrade sssd-commonUpgrade libsss_idmap0Upgrade libsss_certmap0Upgrade sssd-krb5Upgrade libsss_certmap-develUpgrade libnfsidmap-sssUpgrade libsss_nss_idmap-develUpgrade libsss_nss_idmap0Upgrade sssd-winbind-idmapUpgrade python3-ipa_hbacUpgrade libipa_hbac0Upgrade sssdUpgrade python3-sssd-configUpgrade sssd-ipaUpgrade sssd-proxyUpgrade python-sssd-configUpgrade sssd-adUpgrade libsss_idmap-develUpgrade libsss_simpleifp0Upgrade sssd-toolsUpgrade sssd-wbclientUpgrade sssd-32bit | Aug 31, 2021 | Aug 17, 2021 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Aug 17, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub