A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 4.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-clientUpgrade libsss_autofsUpgrade sssd-libwbclientUpgrade sssd-krb5Upgrade libsss_idmapUpgrade libsss_certmapUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-toolsUpgrade sssd-winbind-idmapUpgrade sssd-debuginfoUpgrade sssdUpgrade python-sssUpgrade libsss_simpleifpUpgrade sssd-proxyUpgrade libsss_idmap-develUpgrade libsss_simpleifp-develUpgrade libsss_certmap-develUpgrade python-sssdconfigUpgrade sssd-common-pacUpgrade sssd-libwbclient-develUpgrade sssd-polkit-rulesUpgrade sssd-adUpgrade python-libipa_hbacUpgrade libsss_sudoUpgrade sssd-kcmUpgrade libsss_nss_idmap-develUpgrade sssd-krb5-commonUpgrade sssd-ipaUpgrade sssd-ldapUpgrade sssd-dbusUpgrade python-sss-murmurUpgrade libipa_hbac-develUpgrade sssd-commonUpgrade python-libsss_nss_idmap | Apr 27, 2020 | Jan 15, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Jan 15, 2019 |
| Centos_linux | — | Upgrade sssd-libwbclient-develUpgrade libsss_autofsUpgrade libsss_idmapUpgrade sssd-clientUpgrade sssd-ipaUpgrade sssd-commonUpgrade sssd-ldapUpgrade sssd-dbusUpgrade sssd-proxyUpgrade sssd-toolsUpgrade libsss_idmap-develUpgrade sssd-winbind-idmapUpgrade libsss_simpleifpUpgrade python-libipa_hbacUpgrade sssd-krb5-commonUpgrade sssd-adUpgrade libsss_simpleifp-develUpgrade python-sss-murmurUpgrade sssdUpgrade python-sssUpgrade python-libsss_nss_idmapUpgrade sssd-krb5Upgrade python-sssdconfigUpgrade sssd-polkit-rulesUpgrade libsss_nss_idmapUpgrade libsss_certmapUpgrade libipa_hbacUpgrade libsss_certmap-develUpgrade libipa_hbac-develUpgrade libsss_sudoUpgrade sssd-kcmUpgrade sssd-common-pacUpgrade sssd-libwbclientUpgrade sssd-debuginfoUpgrade libsss_nss_idmap-devel | Aug 28, 2019 | Jan 15, 2019 |
| Debian | — | Upgrade sssd | Feb 14, 2019 | Feb 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsss_certmapUpgrade libsss_simpleifpUpgrade sssdUpgrade libsss_autofsUpgrade python-libsss_nss_idmapUpgrade python-sssdconfigUpgrade python-sssUpgrade sssd-adUpgrade sssd-proxyUpgrade sssd-krb5Upgrade python-sss-murmurUpgrade sssd-ldapUpgrade sssd-krb5-commonUpgrade sssd-libwbclientUpgrade libsss_idmapUpgrade sssd-ipaUpgrade sssd-common-pacUpgrade sssd-clientUpgrade python-libipa_hbacUpgrade sssd-dbusUpgrade libipa_hbacUpgrade sssd-toolsUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade sssd-common | Jul 23, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sssd-krb5-commonUpgrade python-sssUpgrade sssdUpgrade libsss_certmapUpgrade libsss_simpleifpUpgrade sssd-ipaUpgrade sssd-commonUpgrade sssd-adUpgrade python-sssdconfigUpgrade python-libsss_nss_idmapUpgrade libsss_sudoUpgrade python-sss-murmurUpgrade sssd-ldapUpgrade python-libipa_hbacUpgrade libsss_nss_idmapUpgrade libsss_idmapUpgrade libsss_autofsUpgrade libipa_hbacUpgrade sssd-libwbclientUpgrade sssd-dbusUpgrade sssd-clientUpgrade sssd-krb5Upgrade sssd-toolsUpgrade sssd-proxyUpgrade sssd-common-pac | Sep 25, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sssd-common-pacUpgrade sssd-libwbclientUpgrade libsss_idmapUpgrade libsss_autofsUpgrade python-sss-murmurUpgrade libipa_hbacUpgrade python-libipa_hbacUpgrade python-libsss_nss_idmapUpgrade sssd-commonUpgrade sssd-ldapUpgrade sssd-toolsUpgrade sssd-krb5-commonUpgrade sssd-clientUpgrade sssd-dbusUpgrade libsss_sudoUpgrade libsss_certmapUpgrade libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssd-krb5Upgrade sssdUpgrade sssd-proxyUpgrade sssd-adUpgrade libsss_simpleifpUpgrade sssd-ipaUpgrade python-sss | Jun 27, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssd-krb5-commonUpgrade sssd-krb5Upgrade sssd-kcmUpgrade sssd-adUpgrade sssd-commonUpgrade sssdUpgrade libsss_simpleifpUpgrade python3-sssUpgrade libsss_idmapUpgrade sssd-ldapUpgrade sssd-toolsUpgrade libsss_certmapUpgrade libsss_autofsUpgrade python3-sssdconfigUpgrade libsss_sudoUpgrade sssd-libwbclientUpgrade sssd-dbusUpgrade sssd-ipaUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-clientUpgrade sssd-proxyUpgrade python3-libipa_hbacUpgrade python3-sss-murmurUpgrade sssd-winbind-idmapUpgrade sssd-nfs-idmapUpgrade python3-libsss_nss_idmap | Jun 27, 2019 | Jan 15, 2019 |
| Oracle_linux | — | Upgrade sssd-libwbclientUpgrade python-libsss_nss_idmapUpgrade libipa_hbac-develUpgrade sssd-proxyUpgrade sssd-krb5-commonUpgrade libsss_nss_idmap-develUpgrade sssd-toolsUpgrade sssd-libwbclient-develUpgrade libsss_certmapUpgrade libsss_autofsUpgrade libsss_certmap-develUpgrade sssd-krb5Upgrade sssd-ldapUpgrade sssdUpgrade libsss_idmapUpgrade sssd-adUpgrade sssd-dbusUpgrade sssd-winbind-idmapUpgrade python-libipa_hbacUpgrade libsss_idmap-develUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade python-sssdconfigUpgrade python-sssUpgrade sssd-commonUpgrade sssd-polkit-rulesUpgrade sssd-kcmUpgrade sssd-ipaUpgrade libipa_hbac | Jul 21, 2020 | Dec 4, 2018 |
| Redhat_linux | — | Upgrade sssd-krb5Upgrade sssd-libwbclient-develUpgrade python-sssUpgrade python-sss-murmurUpgrade sssd-ldapUpgrade sssd-kcmUpgrade sssd-common-pacUpgrade libipa_hbac-develUpgrade sssdUpgrade libsss_certmap-develUpgrade sssd-clientUpgrade libsss_certmapNo solution existsUpgrade libsss_autofsUpgrade libsss_simpleifpUpgrade libsss_nss_idmap-develUpgrade sssd-libwbclientUpgrade sssd-krb5-commonUpgrade sssd-dbusUpgrade libsss_idmapUpgrade python-sssdconfigUpgrade python-libipa_hbacUpgrade sssd-proxyUpgrade libipa_hbacUpgrade libsss_nss_idmapUpgrade sssd-toolsUpgrade sssd-winbind-idmapUpgrade python-libsss_nss_idmapUpgrade sssd-commonUpgrade libsss_idmap-develUpgrade libsss_simpleifp-develUpgrade sssd-adUpgrade sssd-debuginfoUpgrade sssd-polkit-rulesUpgrade sssd-ipaUpgrade libsss_sudo | Aug 7, 2019 | Jan 15, 2019 |
| Suse | — | Upgrade libipa_hbac-develUpgrade python3-sss-murmurUpgrade libsss_simpleifp0Upgrade libnfsidmap-sssUpgrade libsss_nss_idmap-develUpgrade libsss_certmap0Upgrade libsss_certmap-develUpgrade python3-sssd-configUpgrade adcli-docUpgrade sssd-krb5Upgrade libsss_simpleifp-develUpgrade sssd-dbusUpgrade sssd-wbclient-develUpgrade sssd-commonUpgrade adcliUpgrade libipa_hbac0Upgrade libsss_sudoUpgrade sssdUpgrade python-sssd-configUpgrade sssd-adUpgrade sssd-32bitUpgrade libsss_idmap0Upgrade sssd-ipaUpgrade sssd-ldapUpgrade sssd-winbind-idmapUpgrade libsss_idmap-develUpgrade sssd-proxyUpgrade python3-ipa_hbacUpgrade sssd-krb5-commonUpgrade python3-sss_nss_idmapUpgrade sssd-toolsUpgrade libsss_nss_idmap0Upgrade sssd-wbclient | Mar 7, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub