A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 4.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssd-ipaUpgrade sssd-common-pacUpgrade sssd-krb5-commonUpgrade python-libipa_hbacUpgrade libipa_hbac-develUpgrade libsss_nss_idmap-develUpgrade sssd-dbusUpgrade libsss_simpleifp-develUpgrade sssd-adUpgrade python-sss-murmurUpgrade libsss_certmap-develUpgrade sssd-kcmUpgrade sssd-commonUpgrade sssd-polkit-rulesUpgrade sssd-libwbclient-develUpgrade sssd-ldapUpgrade libsss_idmap-develUpgrade libsss_sudoUpgrade sssd-toolsUpgrade libipa_hbacUpgrade libsss_idmapUpgrade libsss_nss_idmapUpgrade libsss_certmapUpgrade sssd-clientUpgrade libsss_simpleifpUpgrade sssd-libwbclientUpgrade sssd-proxyUpgrade sssd-debuginfoUpgrade sssd-winbind-idmapUpgrade sssdUpgrade libsss_autofsUpgrade sssd-krb5Upgrade python-sss | Apr 27, 2020 | Jan 15, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Jan 15, 2019 |
| Centos_linux | — | Upgrade libsss_idmapUpgrade libsss_idmap-develUpgrade sssd-dbusUpgrade sssd-proxyUpgrade python-libipa_hbacUpgrade sssd-toolsUpgrade libsss_simpleifpUpgrade sssd-winbind-idmapUpgrade sssd-libwbclient-develUpgrade sssd-ipaUpgrade libsss_autofsUpgrade sssd-clientUpgrade sssd-commonUpgrade sssd-ldapUpgrade python-sss-murmurUpgrade sssd-debuginfoUpgrade sssdUpgrade sssd-adUpgrade sssd-common-pacUpgrade sssd-krb5Upgrade sssd-krb5-commonUpgrade python-sssdconfigUpgrade libsss_nss_idmap-develUpgrade libsss_certmapUpgrade libipa_hbacUpgrade python-sssUpgrade libsss_nss_idmapUpgrade python-libsss_nss_idmapUpgrade sssd-polkit-rulesUpgrade sssd-kcmUpgrade libsss_simpleifp-develUpgrade sssd-libwbclientUpgrade libsss_sudoUpgrade libsss_certmap-develUpgrade libipa_hbac-devel | Aug 28, 2019 | Jan 15, 2019 |
| Debian | — | Upgrade sssd | Feb 14, 2019 | Feb 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sssdUpgrade libsss_certmapUpgrade sssd-ldapUpgrade sssd-krb5-commonUpgrade python-sssdconfigUpgrade python-sss-murmurUpgrade libsss_autofsUpgrade python-libsss_nss_idmapUpgrade python-sssUpgrade libsss_simpleifpUpgrade sssd-adUpgrade sssd-krb5Upgrade sssd-proxyUpgrade sssd-dbusUpgrade sssd-toolsUpgrade sssd-common-pacUpgrade libsss_idmapUpgrade sssd-ipaUpgrade sssd-commonUpgrade libsss_sudoUpgrade sssd-libwbclientUpgrade libsss_nss_idmapUpgrade sssd-clientUpgrade python-libipa_hbacUpgrade libipa_hbac | Jul 23, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsss_certmapUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade sssd-krb5-commonUpgrade sssd-ldapUpgrade python-libsss_nss_idmapUpgrade python-sssUpgrade sssd-commonUpgrade sssd-clientUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade libsss_nss_idmapUpgrade libsss_idmapUpgrade sssd-common-pacUpgrade libsss_autofsUpgrade libipa_hbacUpgrade sssd-dbusUpgrade sssd-proxyUpgrade sssd-krb5Upgrade python-libipa_hbacUpgrade libsss_sudoUpgrade libsss_simpleifpUpgrade sssdUpgrade sssd-ipaUpgrade sssd-ad | Sep 25, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sssd-dbusUpgrade sssd-toolsUpgrade libipa_hbacUpgrade python-libsss_nss_idmapUpgrade sssd-clientUpgrade sssd-krb5-commonUpgrade libsss_idmapUpgrade libsss_sudoUpgrade libsss_autofsUpgrade sssd-commonUpgrade python-libipa_hbacUpgrade sssd-ldapUpgrade sssd-common-pacUpgrade python-sss-murmurUpgrade sssd-libwbclientUpgrade python-sssUpgrade sssdUpgrade sssd-proxyUpgrade sssd-krb5Upgrade libsss_nss_idmapUpgrade sssd-adUpgrade libsss_simpleifpUpgrade python-sssdconfigUpgrade libsss_certmapUpgrade sssd-ipa | Jun 27, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssd-krb5-commonUpgrade libsss_idmapUpgrade libsss_autofsUpgrade sssd-krb5Upgrade sssd-toolsUpgrade sssd-ldapUpgrade libsss_simpleifpUpgrade python3-sssUpgrade sssd-adUpgrade libsss_certmapUpgrade sssd-kcmUpgrade sssdUpgrade sssd-commonUpgrade sssd-dbusUpgrade sssd-clientUpgrade python3-libipa_hbacUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-common-pacUpgrade libsss_sudoUpgrade python3-libsss_nss_idmapUpgrade python3-sssdconfigUpgrade sssd-nfs-idmapUpgrade python3-sss-murmurUpgrade sssd-winbind-idmapUpgrade sssd-libwbclientUpgrade sssd-proxyUpgrade sssd-ipa | Jun 27, 2019 | Jan 15, 2019 |
| Oracle_linux | — | Upgrade sssd-common-pacUpgrade libsss_simpleifpUpgrade libsss_autofsUpgrade sssd-ldapUpgrade libsss_certmap-develUpgrade sssdUpgrade libsss_simpleifp-develUpgrade sssd-krb5Upgrade libsss_certmapUpgrade libsss_idmapUpgrade sssd-clientUpgrade sssd-toolsUpgrade sssd-libwbclient-develUpgrade python-sss-murmurUpgrade libsss_nss_idmap-develUpgrade libsss_sudoUpgrade python-libsss_nss_idmapUpgrade sssd-commonUpgrade sssd-polkit-rulesUpgrade sssd-kcmUpgrade libipa_hbacUpgrade libsss_nss_idmapUpgrade sssd-krb5-commonUpgrade sssd-proxyUpgrade libsss_idmap-develUpgrade sssd-libwbclientUpgrade python-sssUpgrade sssd-dbusUpgrade sssd-adUpgrade python-libipa_hbacUpgrade sssd-winbind-idmapUpgrade sssd-ipaUpgrade libipa_hbac-develUpgrade python-sssdconfig | Jul 21, 2020 | Dec 4, 2018 |
| Redhat_linux | — | Upgrade libsss_sudoUpgrade libsss_idmap-develUpgrade sssd-libwbclientUpgrade sssd-ipaUpgrade libipa_hbacUpgrade libsss_idmapUpgrade sssd-dbusUpgrade sssd-commonUpgrade libsss_nss_idmapUpgrade python-libsss_nss_idmapUpgrade sssd-adUpgrade python-libipa_hbacUpgrade python-sssdconfigUpgrade sssd-polkit-rulesUpgrade libsss_simpleifp-develUpgrade sssd-debuginfoUpgrade sssd-winbind-idmapUpgrade sssd-krb5-commonUpgrade sssd-proxyUpgrade libsss_nss_idmap-develUpgrade sssd-toolsUpgrade python-sssUpgrade sssd-krb5Upgrade python-sss-murmurNo solution existsUpgrade libipa_hbac-develUpgrade sssd-kcmUpgrade sssd-common-pacUpgrade libsss_certmapUpgrade sssd-libwbclient-develUpgrade sssd-clientUpgrade sssd-ldapUpgrade libsss_certmap-develUpgrade libsss_simpleifpUpgrade libsss_autofsUpgrade sssd | Aug 7, 2019 | Jan 15, 2019 |
| Suse | — | Upgrade libsss_simpleifp-develUpgrade libipa_hbac-develUpgrade libsss_certmap0Upgrade python3-sss-murmurUpgrade adcli-docUpgrade sssd-krb5Upgrade libsss_nss_idmap-develUpgrade libsss_simpleifp0Upgrade libsss_certmap-develUpgrade python3-sssd-configUpgrade sssd-wbclient-develUpgrade sssd-commonUpgrade sssd-dbusUpgrade libnfsidmap-sssUpgrade python3-ipa_hbacUpgrade sssd-wbclientUpgrade libipa_hbac0Upgrade sssd-32bitUpgrade sssd-toolsUpgrade sssd-adUpgrade sssdUpgrade libsss_sudoUpgrade libsss_nss_idmap0Upgrade libsss_idmap0Upgrade sssd-ipaUpgrade adcliUpgrade python-sssd-configUpgrade sssd-krb5-commonUpgrade python3-sss_nss_idmapUpgrade sssd-proxyUpgrade libsss_idmap-develUpgrade sssd-ldapUpgrade sssd-winbind-idmap | Mar 7, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub