A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 4.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-proxyUpgrade libsss_certmapUpgrade sssd-clientUpgrade sssd-debuginfoUpgrade sssdUpgrade python-sssUpgrade libsss_nss_idmapUpgrade sssd-toolsUpgrade sssd-winbind-idmapUpgrade sssd-libwbclientUpgrade libsss_idmapUpgrade libipa_hbacUpgrade sssd-krb5Upgrade libsss_simpleifpUpgrade libsss_autofsUpgrade libsss_nss_idmap-develUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifp-develUpgrade sssd-dbusUpgrade libsss_idmap-develUpgrade python-sssdconfigUpgrade sssd-kcmUpgrade libsss_certmap-develUpgrade sssd-ipaUpgrade sssd-commonUpgrade sssd-common-pacUpgrade libipa_hbac-develUpgrade python-sss-murmurUpgrade sssd-adUpgrade libsss_sudoUpgrade sssd-ldapUpgrade sssd-krb5-commonUpgrade sssd-polkit-rulesUpgrade sssd-libwbclient-develUpgrade python-libipa_hbac | Apr 27, 2020 | Jan 15, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Jan 15, 2019 |
| Centos_linux | — | Upgrade libsss_simpleifp-develUpgrade libipa_hbac-develUpgrade libipa_hbacUpgrade sssd-libwbclientUpgrade libsss_certmapUpgrade python-sssdconfigUpgrade sssd-debuginfoUpgrade python-libsss_nss_idmapUpgrade libsss_nss_idmap-develUpgrade python-sssUpgrade sssd-common-pacUpgrade sssd-krb5Upgrade libsss_nss_idmapUpgrade sssdUpgrade libsss_certmap-develUpgrade python-sss-murmurUpgrade sssd-kcmUpgrade sssd-polkit-rulesUpgrade libsss_sudoUpgrade sssd-adUpgrade sssd-krb5-commonUpgrade sssd-winbind-idmapUpgrade libsss_simpleifpUpgrade python-libipa_hbacUpgrade sssd-ipaUpgrade libsss_idmapUpgrade sssd-libwbclient-develUpgrade sssd-proxyUpgrade sssd-toolsUpgrade libsss_autofsUpgrade sssd-ldapUpgrade sssd-dbusUpgrade sssd-commonUpgrade sssd-clientUpgrade libsss_idmap-devel | Aug 28, 2019 | Jan 15, 2019 |
| Debian | — | Upgrade sssd | Feb 14, 2019 | Feb 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sssd-proxyUpgrade sssd-krb5Upgrade sssd-adUpgrade libsss_simpleifpUpgrade python-sssUpgrade libsss_certmapUpgrade python-sssdconfigUpgrade python-libsss_nss_idmapUpgrade sssd-krb5-commonUpgrade python-sss-murmurUpgrade sssd-ldapUpgrade sssdUpgrade libsss_autofsUpgrade libsss_nss_idmapUpgrade sssd-ipaUpgrade libipa_hbacUpgrade sssd-dbusUpgrade sssd-toolsUpgrade python-libipa_hbacUpgrade sssd-clientUpgrade sssd-common-pacUpgrade libsss_idmapUpgrade sssd-libwbclientUpgrade sssd-commonUpgrade libsss_sudo | Jul 23, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsss_simpleifpUpgrade sssd-ipaUpgrade python-libsss_nss_idmapUpgrade sssdUpgrade libsss_sudoUpgrade sssd-commonUpgrade libsss_certmapUpgrade sssd-krb5-commonUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade sssd-ldapUpgrade python-sssUpgrade sssd-adUpgrade sssd-proxyUpgrade libipa_hbacUpgrade libsss_autofsUpgrade libsss_idmapUpgrade sssd-toolsUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade sssd-krb5Upgrade python-libipa_hbacUpgrade sssd-dbusUpgrade sssd-clientUpgrade sssd-libwbclient | Sep 25, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsss_simpleifpUpgrade sssd-proxyUpgrade python-sssdconfigUpgrade sssdUpgrade sssd-krb5Upgrade libsss_nss_idmapUpgrade sssd-ipaUpgrade libsss_certmapUpgrade python-sssUpgrade sssd-adUpgrade libsss_autofsUpgrade sssd-clientUpgrade sssd-toolsUpgrade sssd-krb5-commonUpgrade sssd-common-pacUpgrade python-libipa_hbacUpgrade sssd-dbusUpgrade libsss_idmapUpgrade sssd-libwbclientUpgrade python-sss-murmurUpgrade libipa_hbacUpgrade python-libsss_nss_idmapUpgrade sssd-commonUpgrade libsss_sudoUpgrade sssd-ldap | Jun 27, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssd-libwbclientUpgrade sssd-clientUpgrade python3-sss-murmurUpgrade sssd-proxyUpgrade sssd-common-pacUpgrade sssd-ipaUpgrade sssd-dbusUpgrade python3-libipa_hbacUpgrade python3-sssdconfigUpgrade python3-libsss_nss_idmapUpgrade sssd-winbind-idmapUpgrade libsss_sudoUpgrade sssd-nfs-idmapUpgrade libipa_hbacUpgrade libsss_nss_idmapUpgrade libsss_simpleifpUpgrade libsss_autofsUpgrade python3-sssUpgrade sssd-toolsUpgrade sssdUpgrade sssd-krb5Upgrade sssd-krb5-commonUpgrade libsss_idmapUpgrade sssd-commonUpgrade libsss_certmapUpgrade sssd-kcmUpgrade sssd-ldapUpgrade sssd-ad | Jun 27, 2019 | Jan 15, 2019 |
| Oracle_linux | — | Upgrade libsss_simpleifp-develUpgrade libsss_certmap-develUpgrade libsss_autofsUpgrade libsss_simpleifpUpgrade sssdUpgrade libsss_idmapUpgrade sssd-clientUpgrade sssd-krb5Upgrade python-sss-murmurUpgrade sssd-ldapUpgrade libsss_certmapUpgrade sssd-libwbclient-develUpgrade libsss_nss_idmap-develUpgrade sssd-common-pacUpgrade sssd-toolsUpgrade python-sssUpgrade libipa_hbac-develUpgrade python-sssdconfigUpgrade sssd-proxyUpgrade libipa_hbacUpgrade sssd-adUpgrade python-libipa_hbacUpgrade sssd-dbusUpgrade sssd-winbind-idmapUpgrade sssd-ipaUpgrade python-libsss_nss_idmapUpgrade sssd-libwbclientUpgrade sssd-polkit-rulesUpgrade sssd-kcmUpgrade sssd-commonUpgrade libsss_idmap-develUpgrade libsss_nss_idmapUpgrade libsss_sudoUpgrade sssd-krb5-common | Jul 21, 2020 | Dec 4, 2018 |
| Redhat_linux | — | Upgrade libsss_nss_idmapUpgrade libsss_sudoUpgrade libsss_idmapUpgrade python-libipa_hbacUpgrade sssd-toolsUpgrade sssd-debuginfoUpgrade sssd-krb5-commonUpgrade sssd-proxyUpgrade sssd-adUpgrade libsss_nss_idmap-develUpgrade libipa_hbacUpgrade sssd-dbusUpgrade sssd-ipaUpgrade sssd-commonUpgrade libsss_idmap-develUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifp-develUpgrade python-sssdconfigUpgrade sssd-polkit-rulesUpgrade sssd-libwbclientUpgrade sssd-winbind-idmapUpgrade libsss_simpleifpUpgrade libsss_autofsUpgrade libsss_certmap-develUpgrade sssd-kcmUpgrade libsss_certmapUpgrade python-sss-murmurUpgrade sssd-krb5Upgrade sssd-libwbclient-develUpgrade sssd-common-pacUpgrade libipa_hbac-develNo solution existsUpgrade sssd-clientUpgrade sssd-ldapUpgrade sssdUpgrade python-sss | Aug 7, 2019 | Jan 15, 2019 |
| Suse | — | Upgrade sssd-krb5-commonUpgrade sssd-ldapUpgrade libipa_hbac0Upgrade libsss_idmap-develUpgrade sssd-toolsUpgrade sssd-winbind-idmapUpgrade python3-sss_nss_idmapUpgrade sssd-proxyUpgrade libsss_sudoUpgrade sssdUpgrade sssd-wbclientUpgrade libsss_nss_idmap0Upgrade sssd-adUpgrade python3-ipa_hbacUpgrade adcliUpgrade sssd-ipaUpgrade sssd-32bitUpgrade python-sssd-configUpgrade libsss_idmap0Upgrade sssd-dbusUpgrade libsss_simpleifp-develUpgrade python3-sss-murmurUpgrade libsss_simpleifp0Upgrade adcli-docUpgrade libnfsidmap-sssUpgrade libsss_certmap-develUpgrade sssd-wbclient-develUpgrade python3-sssd-configUpgrade libsss_nss_idmap-develUpgrade libipa_hbac-develUpgrade libsss_certmap0Upgrade sssd-krb5Upgrade sssd-common | Mar 7, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub