It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login environment, if a password hash was locally cached for a given user, an authenticated attacker could use this flaw to retrieve it.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade sssd | Dec 22, 2017 | Nov 6, 2017 |
| Centos_linux | — | Upgrade sssd-commonUpgrade sssd-proxyUpgrade libpath_utilsUpgrade sssd-winbind-idmapUpgrade libini_configUpgrade sssd-ipaUpgrade python-libipa_hbacUpgrade libini_config-develUpgrade libcollection-develUpgrade libsss_simpleifpUpgrade libpath_utils-develUpgrade sssd-ldapUpgrade sssd-clientUpgrade libsss_idmap-develUpgrade libsss_autofsUpgrade libsss_idmapUpgrade libref_array-develUpgrade sssd-toolsUpgrade ding-libs-debuginfoUpgrade sssd-libwbclient-develUpgrade sssd-common-pacUpgrade python-libsss_nss_idmapUpgrade sssd-debuginfoUpgrade libipa_hbac-develUpgrade sssd-krb5Upgrade sssd-polkit-rulesUpgrade sssd-libwbclientUpgrade python-sssdconfigUpgrade libbasicobjects-develUpgrade sssd-dbusUpgrade sssd-adUpgrade python-sssUpgrade libsss_certmap-develUpgrade python-sss-murmurUpgrade libdhashUpgrade libipa_hbacUpgrade libsss_certmapUpgrade libsss_simpleifp-develUpgrade libsss_nss_idmap-develUpgrade libref_arrayUpgrade sssdUpgrade libsss_nss_idmapUpgrade libbasicobjectsUpgrade sssd-kcmUpgrade sssd-krb5-commonUpgrade libcollectionUpgrade libdhash-develUpgrade libsss_sudo | Dec 7, 2017 | Nov 6, 2017 |
| Debian | — | Upgrade sssd | Jul 30, 2024 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade sssd-krb5-commonUpgrade sssd-ldapUpgrade python-sss-murmurUpgrade libsss_certmapUpgrade python-sssUpgrade sssd-krb5Upgrade sssd-proxyUpgrade libsss_sudoUpgrade sssd-ipaUpgrade libsss_autofsUpgrade sssd-adUpgrade python-sssdconfigUpgrade python-libsss_nss_idmapUpgrade sssdUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade python-libipa_hbacUpgrade sssd-libwbclientUpgrade sssd-commonUpgrade libsss_idmapUpgrade sssd-clientUpgrade libipa_hbac | Jan 18, 2018 | Oct 3, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-sssdconfigUpgrade sssd-ipaUpgrade sssd-libwbclientUpgrade sssd-commonUpgrade sssd-proxyUpgrade libsss_sudoUpgrade sssd-dbusUpgrade python-libipa_hbacUpgrade libsss_nss_idmapUpgrade sssd-clientUpgrade sssd-common-pacUpgrade libipa_hbacUpgrade python-sssUpgrade sssd-adUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifpUpgrade sssdUpgrade sssd-toolsUpgrade libsss_certmapUpgrade libsss_idmapUpgrade sssd-krb5Upgrade python-sss-murmurUpgrade libsss_autofsUpgrade sssd-ldapUpgrade sssd-krb5-common | Jan 18, 2018 | Oct 3, 2017 |
| Oracle_linux | — | Upgrade libsss_simpleifpUpgrade sssdUpgrade libsss_nss_idmapUpgrade libsss_autofsUpgrade sssd-toolsUpgrade sssd-proxyUpgrade libpath_utilsUpgrade libsss_idmap-develUpgrade sssd-ipaUpgrade libref_array-develUpgrade libini_configUpgrade libcollection-develUpgrade libini_config-develUpgrade sssd-adUpgrade libsss_idmapUpgrade libsss_sudoUpgrade python-sssdconfigUpgrade libdhashUpgrade libpath_utils-develUpgrade sssd-winbind-idmapUpgrade sssd-common-pacUpgrade sssd-commonUpgrade sssd-kcmUpgrade libsss_certmapUpgrade sssd-krb5Upgrade libsss_certmap-develUpgrade sssd-dbusUpgrade libbasicobjects-develUpgrade libref_arrayUpgrade libsss_simpleifp-develUpgrade sssd-libwbclientUpgrade python-libsss_nss_idmapUpgrade libbasicobjectsUpgrade python-sssUpgrade libdhash-develUpgrade libsss_nss_idmap-develUpgrade sssd-libwbclient-develUpgrade python-sss-murmurUpgrade libipa_hbacUpgrade sssd-polkit-rulesUpgrade sssd-ldapUpgrade sssd-clientUpgrade libipa_hbac-develUpgrade sssd-krb5-commonUpgrade python-libipa_hbacUpgrade libcollection | Dec 5, 2017 | Oct 3, 2017 |
| Redhat_linux | — | Upgrade sssd-polkit-rulesUpgrade sssd-krb5-commonUpgrade sssd-adUpgrade sssd-commonUpgrade sssd-dbusUpgrade sssd-kcmUpgrade python-libsss_nss_idmapUpgrade libdhash-develUpgrade libsss_nss_idmapUpgrade sssd-debuginfoUpgrade sssd-ipaUpgrade libini_configUpgrade libsss_sudoUpgrade libsss_idmap-develUpgrade libsss_simpleifp-develUpgrade sssd-winbind-idmapUpgrade libcollectionUpgrade libbasicobjectsUpgrade libipa_hbac-develUpgrade libcollection-develUpgrade libipa_hbacUpgrade libsss_nss_idmap-develUpgrade libbasicobjects-develUpgrade python-sssUpgrade libsss_certmap-develUpgrade python-sssdconfigUpgrade libdhashUpgrade libsss_simpleifpUpgrade sssd-libwbclientUpgrade python-libipa_hbacUpgrade python-sss-murmurUpgrade ding-libs-debuginfoUpgrade libref_array-develUpgrade sssd-libwbclient-develUpgrade sssd-clientUpgrade libsss_autofsUpgrade libsss_idmapUpgrade sssd-ldapUpgrade libref_arrayUpgrade libini_config-develUpgrade sssdUpgrade libpath_utils-develUpgrade sssd-common-pacUpgrade sssd-toolsUpgrade sssd-proxyUpgrade sssd-krb5Upgrade libsss_certmapUpgrade libpath_utils | Dec 5, 2017 | Nov 6, 2017 |
| Suse | — | Upgrade libsss_sudoUpgrade sssd-proxyUpgrade libsss_idmap-develUpgrade libsss_simpleifp0Upgrade sssd-winbind-idmapUpgrade sssd-ipaUpgrade sssd-dbusUpgrade libsss_certmap-develUpgrade python3-sssd-configUpgrade libipa_hbac-develUpgrade libipa_hbac0Upgrade sssd-wbclientUpgrade sssd-krb5-commonUpgrade libsss_nss_idmap0Upgrade sssd-ldapUpgrade sssd-wbclient-develUpgrade sssd-adUpgrade python-sssd-configUpgrade libsss_nss_idmap-develUpgrade sssd-32bitUpgrade libsss_certmap0Upgrade sssd-toolsUpgrade sssd-krb5Upgrade libsss_idmap0Upgrade sssdUpgrade sssd-commonUpgrade libsss_simpleifp-devel | Nov 6, 2017 | Nov 6, 2017 |
| Ubuntu | — | Upgrade sssd-toolsUpgrade sssdUpgrade sssd-common | Jan 11, 2018 | Nov 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub