It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login environment, if a password hash was locally cached for a given user, an authenticated attacker could use this flaw to retrieve it.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade sssd | Dec 22, 2017 | Nov 6, 2017 |
| Centos_linux | — | Upgrade sssd-ldapUpgrade libsss_simpleifpUpgrade libsss_idmapUpgrade libini_config-develUpgrade sssd-ipaUpgrade libini_configUpgrade sssd-libwbclient-develUpgrade sssd-proxyUpgrade ding-libs-debuginfoUpgrade libpath_utils-develUpgrade sssd-winbind-idmapUpgrade sssd-commonUpgrade libref_array-develUpgrade libsss_idmap-develUpgrade libpath_utilsUpgrade sssd-clientUpgrade libcollection-develUpgrade python-libipa_hbacUpgrade sssd-toolsUpgrade libsss_autofsUpgrade libsss_nss_idmapUpgrade python-sssUpgrade libsss_certmapUpgrade libsss_simpleifp-develUpgrade libref_arrayUpgrade sssdUpgrade libsss_sudoUpgrade sssd-krb5Upgrade libbasicobjects-develUpgrade libcollectionUpgrade libbasicobjectsUpgrade sssd-dbusUpgrade sssd-debuginfoUpgrade python-libsss_nss_idmapUpgrade libipa_hbac-develUpgrade libdhashUpgrade libsss_certmap-develUpgrade sssd-polkit-rulesUpgrade python-sssdconfigUpgrade sssd-libwbclientUpgrade libsss_nss_idmap-develUpgrade libipa_hbacUpgrade sssd-adUpgrade sssd-common-pacUpgrade libdhash-develUpgrade python-sss-murmurUpgrade sssd-krb5-commonUpgrade sssd-kcm | Dec 7, 2017 | Nov 6, 2017 |
| Debian | — | Upgrade sssd | Jul 30, 2024 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade sssd-libwbclientUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade libsss_idmapUpgrade python-libipa_hbacUpgrade sssd-clientUpgrade libipa_hbacUpgrade sssd-commonUpgrade sssd-krb5-commonUpgrade sssd-ldapUpgrade python-sssdconfigUpgrade sssd-proxyUpgrade python-sssUpgrade libsss_sudoUpgrade libsss_autofsUpgrade libsss_certmapUpgrade python-libsss_nss_idmapUpgrade sssdUpgrade python-sss-murmurUpgrade sssd-krb5Upgrade sssd-adUpgrade sssd-ipa | Jan 18, 2018 | Oct 3, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsss_nss_idmapUpgrade sssd-dbusUpgrade libipa_hbacUpgrade sssd-ipaUpgrade sssd-libwbclientUpgrade python-sssUpgrade sssd-commonUpgrade sssd-common-pacUpgrade python-sssdconfigUpgrade sssd-clientUpgrade sssd-proxyUpgrade libsss_sudoUpgrade python-libipa_hbacUpgrade sssd-ldapUpgrade sssdUpgrade python-sss-murmurUpgrade sssd-krb5Upgrade libsss_certmapUpgrade sssd-toolsUpgrade sssd-adUpgrade sssd-krb5-commonUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifpUpgrade libsss_autofsUpgrade libsss_idmap | Jan 18, 2018 | Oct 3, 2017 |
| Oracle_linux | — | Upgrade python-sssdconfigUpgrade libdhashUpgrade sssd-toolsUpgrade sssd-proxyUpgrade libsss_simpleifpUpgrade sssd-adUpgrade sssd-ipaUpgrade libsss_autofsUpgrade libsss_nss_idmapUpgrade sssd-winbind-idmapUpgrade libpath_utilsUpgrade libref_array-develUpgrade libsss_idmap-develUpgrade libini_config-develUpgrade libcollection-develUpgrade libini_configUpgrade libsss_idmapUpgrade libpath_utils-develUpgrade sssdUpgrade libsss_sudoUpgrade libbasicobjectsUpgrade libsss_certmap-develUpgrade sssd-kcmUpgrade python-sss-murmurUpgrade sssd-clientUpgrade sssd-polkit-rulesUpgrade python-sssUpgrade sssd-ldapUpgrade python-libipa_hbacUpgrade sssd-commonUpgrade libsss_certmapUpgrade libdhash-develUpgrade libipa_hbac-develUpgrade libref_arrayUpgrade sssd-libwbclientUpgrade sssd-common-pacUpgrade sssd-krb5-commonUpgrade sssd-libwbclient-develUpgrade libsss_nss_idmap-develUpgrade libipa_hbacUpgrade sssd-dbusUpgrade python-libsss_nss_idmapUpgrade libbasicobjects-develUpgrade libsss_simpleifp-develUpgrade sssd-krb5Upgrade libcollection | Dec 5, 2017 | Oct 3, 2017 |
| Redhat_linux | — | Upgrade python-libipa_hbacUpgrade libsss_simpleifp-develUpgrade python-libsss_nss_idmapUpgrade libcollectionUpgrade sssd-kcmUpgrade sssd-krb5-commonUpgrade libipa_hbacUpgrade libdhash-develUpgrade sssd-commonUpgrade sssd-polkit-rulesUpgrade python-sssUpgrade python-sss-murmurUpgrade libsss_sudoUpgrade sssd-dbusUpgrade libsss_nss_idmapUpgrade libbasicobjects-develUpgrade sssd-libwbclientUpgrade libsss_nss_idmap-develUpgrade libsss_idmap-develUpgrade libbasicobjectsUpgrade libini_configUpgrade libcollection-develUpgrade sssd-adUpgrade libsss_simpleifpUpgrade libsss_certmap-develUpgrade python-sssdconfigUpgrade libdhashUpgrade sssd-debuginfoUpgrade sssd-ipaUpgrade sssd-winbind-idmapUpgrade libipa_hbac-develUpgrade sssd-krb5Upgrade sssd-clientUpgrade ding-libs-debuginfoUpgrade sssd-proxyUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade libref_arrayUpgrade libpath_utils-develUpgrade sssd-toolsUpgrade libref_array-develUpgrade libpath_utilsUpgrade libsss_idmapUpgrade libsss_autofsUpgrade sssdUpgrade sssd-libwbclient-develUpgrade libini_config-develUpgrade libsss_certmap | Dec 5, 2017 | Nov 6, 2017 |
| Suse | — | Upgrade sssdUpgrade sssd-krb5Upgrade sssd-commonUpgrade sssd-ldapUpgrade libsss_nss_idmap0Upgrade libsss_simpleifp-develUpgrade libsss_certmap0Upgrade sssd-32bitUpgrade sssd-adUpgrade sssd-wbclient-develUpgrade sssd-toolsUpgrade python-sssd-configUpgrade libsss_idmap0Upgrade libsss_nss_idmap-develUpgrade sssd-krb5-commonUpgrade sssd-ipaUpgrade libsss_simpleifp0Upgrade libipa_hbac0Upgrade sssd-dbusUpgrade libsss_sudoUpgrade sssd-winbind-idmapUpgrade sssd-wbclientUpgrade libsss_certmap-develUpgrade libsss_idmap-develUpgrade libipa_hbac-develUpgrade sssd-proxyUpgrade python3-sssd-config | Nov 6, 2017 | Nov 6, 2017 |
| Ubuntu | — | Upgrade sssd-commonUpgrade sssd-toolsUpgrade sssd | Jan 11, 2018 | Nov 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub