sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-sss-murmurUpgrade python-sssdconfigUpgrade libsss_simpleifp-develUpgrade python-sssUpgrade libsss_sudoUpgrade sssdUpgrade libsss_idmapUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifpUpgrade python-libipa_hbacUpgrade sssd-polkit-rulesUpgrade sssd-adUpgrade sssd-krb5-commonUpgrade libsss_idmap-develUpgrade sssd-ldapUpgrade libipa_hbacUpgrade sssd-winbind-idmapUpgrade sssd-kcmUpgrade sssd-proxyUpgrade sssd-ipaUpgrade sssd-dbusUpgrade sssd-krb5Upgrade libsss_nss_idmapUpgrade sssd-clientUpgrade libsss_autofsUpgrade libipa_hbac-develUpgrade sssd-libwbclientUpgrade libsss_nss_idmap-develUpgrade sssd-toolsUpgrade libsss_certmapUpgrade sssd-commonUpgrade sssd-debuginfoUpgrade sssd-common-pacUpgrade libsss_certmap-develUpgrade sssd-libwbclient-devel | Mar 22, 2023 | Feb 1, 2023 |
| Amazon_linux | — | Upgrade sssd | Apr 6, 2023 | Jan 24, 2023 |
| Centos_linux | — | Upgrade sssd-common-pacUpgrade sssd-clientUpgrade sssd-libwbclient-develUpgrade sssd-toolsUpgrade libsss_idmapUpgrade sssd-ldapUpgrade sssdUpgrade sssd-proxyUpgrade libsss_autofsUpgrade sssd-krb5Upgrade libsss_certmapUpgrade python-sssUpgrade sssd-dbusUpgrade python-sssdconfigUpgrade libsss_nss_idmapUpgrade python-libsss_nss_idmapUpgrade libsss_nss_idmap-develUpgrade sssd-krb5-commonUpgrade python-sss-murmurUpgrade sssd-commonUpgrade libsss_simpleifpUpgrade sssd-adUpgrade libsss_idmap-develUpgrade sssd-debuginfoUpgrade libsss_sudoUpgrade sssd-ipaUpgrade sssd-polkit-rulesUpgrade sssd-libwbclientUpgrade libsss_simpleifp-develUpgrade libipa_hbac-develUpgrade libipa_hbacUpgrade sssd-kcmUpgrade libsss_certmap-develUpgrade python-libipa_hbacUpgrade sssd-winbind-idmap | Jan 27, 2023 | Jan 24, 2023 |
| Debian | — | Upgrade sssd | May 31, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-sssdUpgrade sssd | May 18, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-sssdconfigUpgrade python-sss-murmurUpgrade libipa_hbacUpgrade python-libsss_nss_idmapUpgrade libsss_sudoUpgrade sssd-krb5-commonUpgrade libsss_simpleifpUpgrade python-libipa_hbacUpgrade sssd-ipaUpgrade sssdUpgrade sssd-adUpgrade python-sssUpgrade sssd-libwbclientUpgrade sssd-dbusUpgrade libsss_nss_idmapUpgrade sssd-ldapUpgrade sssd-common-pacUpgrade sssd-commonUpgrade sssd-clientUpgrade sssd-toolsUpgrade sssd-krb5Upgrade libsss_autofsUpgrade libsss_certmapUpgrade libsss_idmapUpgrade sssd-proxy | Jun 9, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssd-kcmUpgrade libsss_idmapUpgrade libipa_hbacUpgrade python2-sssUpgrade sssd-ipaUpgrade sssd-clientUpgrade sssd-libwbclientUpgrade sssd-toolsUpgrade sssd-dbusUpgrade sssd-common-pacUpgrade sssd-commonUpgrade python2-libsss_nss_idmapUpgrade libsss_nss_idmapUpgrade python3-sss-murmurUpgrade sssd-winbind-idmapUpgrade libsss_sudoUpgrade python3-sssdconfigUpgrade python2-sssdconfigUpgrade sssdUpgrade sssd-krb5Upgrade sssd-adUpgrade sssd-proxyUpgrade python2-sss-murmurUpgrade libsss_certmapUpgrade sssd-krb5-commonUpgrade libsss_autofsUpgrade python3-sssUpgrade python2-libipa_hbacUpgrade sssd-ldapUpgrade python3-libsss_nss_idmapUpgrade sssd-nfs-idmapUpgrade libsss_simpleifpUpgrade python3-libipa_hbac | Apr 13, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sssdUpgrade python3-sssd | May 10, 2023 | Feb 1, 2023 |
| Oracle_linux | — | Upgrade libsss_idmap-develUpgrade libsss_simpleifpUpgrade sssd-ipaUpgrade libsss_idmapUpgrade sssd-adUpgrade python-libipa_hbacUpgrade libsss_autofsUpgrade sssd-toolsUpgrade sssd-proxyUpgrade sssdUpgrade libsss_nss_idmapUpgrade sssd-winbind-idmapUpgrade libsss_sudoUpgrade sssd-libwbclient-develUpgrade python-sssdconfigUpgrade python-libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-kcmUpgrade libsss_certmapUpgrade sssd-dbusUpgrade libipa_hbac-develUpgrade python-sssUpgrade libsss_nss_idmap-develUpgrade libsss_certmap-develUpgrade libsss_simpleifp-develUpgrade sssd-ldapUpgrade sssd-libwbclientUpgrade sssd-common-pacUpgrade sssd-commonUpgrade python-sss-murmurUpgrade sssd-krb5-commonUpgrade sssd-clientUpgrade sssd-polkit-rulesUpgrade sssd-krb5 | Jan 25, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade sssd-proxyUpgrade sssd-debuginfoUpgrade libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssd-polkit-rulesUpgrade libipa_hbacUpgrade libsss_certmap-develUpgrade sssdUpgrade libsss_simpleifpUpgrade sssd-krb5Upgrade sssd-adUpgrade libsss_certmapUpgrade python-sssUpgrade libsss_simpleifp-develUpgrade sssd-krb5-commonUpgrade sssd-ldapUpgrade sssd-winbind-idmapUpgrade sssd-toolsUpgrade libsss_sudoUpgrade libsss_idmapUpgrade sssd-clientUpgrade python-libsss_nss_idmapUpgrade python-libipa_hbacUpgrade libipa_hbac-develUpgrade libsss_autofsUpgrade sssd-dbusUpgrade sssd-libwbclientUpgrade libsss_idmap-develUpgrade sssd-kcmUpgrade libsss_nss_idmap-develUpgrade sssd-common-pacUpgrade python-sss-murmurUpgrade sssd-commonUpgrade sssd-ipaUpgrade sssd-libwbclient-devel | Jan 27, 2023 | Jan 24, 2023 |
| Suse | — | Upgrade sssd-32bitUpgrade sssd-adUpgrade sssdUpgrade sssd-toolsUpgrade libsss_nss_idmap0Upgrade sssd-wbclientUpgrade sssd-common-32bitUpgrade sssd-krb5-commonUpgrade sssd-ipaUpgrade sssd-proxyUpgrade libsss_idmap-develUpgrade sssd-winbind-idmapUpgrade python3-sssd-configUpgrade libipa_hbac0Upgrade libsss_simpleifp0Upgrade python-sssd-configUpgrade libsss_certmap0Upgrade libsss_certmap-develUpgrade libipa_hbac-develUpgrade sssd-dbusUpgrade sssd-wbclient-develUpgrade sssd-ldapUpgrade sssd-krb5Upgrade libsss_idmap0Upgrade libsss_simpleifp-develUpgrade sssd-commonUpgrade libsss_nss_idmap-devel | Jan 30, 2023 | Jan 27, 2023 |
| Ubuntu | — | Upgrade sssd | Jun 13, 2023 | Feb 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub