A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 4.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-krb5-commonUpgrade libsss_nss_idmap-develUpgrade python-libsss_nss_idmapUpgrade python-libipa_hbacUpgrade sssd-commonUpgrade libipa_hbac-develUpgrade libsss_sudoUpgrade python-sssdconfigUpgrade sssd-libwbclient-develUpgrade sssd-polkit-rulesUpgrade libsss_simpleifp-develUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade libsss_idmap-develUpgrade sssd-dbusUpgrade sssd-adUpgrade sssd-kcmUpgrade libsss_certmap-develUpgrade python-sss-murmurUpgrade sssd-ipaUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade sssd-proxyUpgrade sssd-winbind-idmapUpgrade libsss_certmapUpgrade libsss_idmapUpgrade libsss_simpleifpUpgrade sssd-clientUpgrade libipa_hbacUpgrade python-sssUpgrade libsss_autofsUpgrade libsss_nss_idmapUpgrade sssd-krb5Upgrade sssd-debuginfoUpgrade sssd | Apr 27, 2020 | Jan 15, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Jan 15, 2019 |
| Centos_linux | — | Upgrade sssdUpgrade sssd-debuginfoUpgrade python-sssUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifp-develUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade libsss_nss_idmap-develUpgrade sssd-krb5-commonUpgrade python-sss-murmurUpgrade sssd-krb5Upgrade python-sssdconfigUpgrade sssd-common-pacUpgrade sssd-polkit-rulesUpgrade libipa_hbac-develUpgrade sssd-libwbclientUpgrade libsss_certmap-develUpgrade sssd-kcmUpgrade sssd-adUpgrade libipa_hbacUpgrade libsss_certmapUpgrade python-libipa_hbacUpgrade libsss_idmap-develUpgrade libsss_simpleifpUpgrade libsss_autofsUpgrade sssd-dbusUpgrade sssd-libwbclient-develUpgrade libsss_idmapUpgrade sssd-proxyUpgrade sssd-toolsUpgrade sssd-winbind-idmapUpgrade sssd-clientUpgrade sssd-ldapUpgrade sssd-commonUpgrade sssd-ipa | Aug 28, 2019 | Jan 15, 2019 |
| Debian | — | Upgrade sssd | Feb 14, 2019 | Feb 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsss_certmapUpgrade libsss_simpleifpUpgrade libsss_autofsUpgrade python-libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssdUpgrade python-sssUpgrade sssd-ldapUpgrade sssd-adUpgrade sssd-proxyUpgrade sssd-krb5Upgrade sssd-krb5-commonUpgrade python-sss-murmurUpgrade python-libipa_hbacUpgrade sssd-toolsUpgrade libipa_hbacUpgrade sssd-dbusUpgrade sssd-common-pacUpgrade libsss_idmapUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade sssd-commonUpgrade sssd-libwbclientUpgrade sssd-ipaUpgrade sssd-client | Jul 23, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sssd-krb5Upgrade sssd-proxyUpgrade libsss_nss_idmapUpgrade sssd-common-pacUpgrade sssd-dbusUpgrade python-libipa_hbacUpgrade sssd-toolsUpgrade libsss_idmapUpgrade sssd-libwbclientUpgrade libipa_hbacUpgrade sssd-clientUpgrade libsss_autofsUpgrade sssd-commonUpgrade libsss_sudoUpgrade sssd-adUpgrade sssdUpgrade python-libsss_nss_idmapUpgrade sssd-ipaUpgrade libsss_simpleifpUpgrade python-sss-murmurUpgrade sssd-ldapUpgrade python-sssdconfigUpgrade libsss_certmapUpgrade python-sssUpgrade sssd-krb5-common | Sep 25, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sssd-krb5-commonUpgrade sssd-dbusUpgrade sssd-clientUpgrade libipa_hbacUpgrade python-libsss_nss_idmapUpgrade libsss_idmapUpgrade sssd-common-pacUpgrade python-libipa_hbacUpgrade libsss_autofsUpgrade sssd-commonUpgrade sssd-toolsUpgrade sssd-ldapUpgrade libsss_sudoUpgrade sssd-libwbclientUpgrade python-sss-murmurUpgrade libsss_certmapUpgrade sssd-ipaUpgrade python-sssdconfigUpgrade sssdUpgrade sssd-proxyUpgrade libsss_simpleifpUpgrade sssd-krb5Upgrade python-sssUpgrade libsss_nss_idmapUpgrade sssd-ad | Jun 27, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-libipa_hbacUpgrade sssd-ipaUpgrade sssd-dbusUpgrade sssd-common-pacUpgrade sssd-proxyUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-libwbclientUpgrade python3-libsss_nss_idmapUpgrade python3-sss-murmurUpgrade sssd-clientUpgrade python3-sssdconfigUpgrade libsss_sudoUpgrade sssd-nfs-idmapUpgrade sssd-winbind-idmapUpgrade sssd-adUpgrade python3-sssUpgrade libsss_simpleifpUpgrade libsss_autofsUpgrade sssdUpgrade sssd-krb5Upgrade libsss_certmapUpgrade sssd-ldapUpgrade sssd-commonUpgrade sssd-toolsUpgrade sssd-kcmUpgrade libsss_idmapUpgrade sssd-krb5-common | Jun 27, 2019 | Jan 15, 2019 |
| Oracle_linux | — | Upgrade libsss_certmapUpgrade sssd-toolsUpgrade sssd-common-pacUpgrade sssd-clientUpgrade libsss_simpleifp-develUpgrade libsss_nss_idmap-develUpgrade sssd-ldapUpgrade sssdUpgrade sssd-krb5Upgrade sssd-libwbclient-develUpgrade libsss_autofsUpgrade python-sss-murmurUpgrade libsss_simpleifpUpgrade libsss_certmap-develUpgrade libsss_idmapUpgrade python-libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssd-krb5-commonUpgrade libipa_hbacUpgrade sssd-libwbclientUpgrade libsss_idmap-develUpgrade sssd-winbind-idmapUpgrade sssd-ipaUpgrade sssd-dbusUpgrade sssd-adUpgrade python-libipa_hbacUpgrade sssd-kcmUpgrade python-sssUpgrade sssd-commonUpgrade sssd-polkit-rulesUpgrade libipa_hbac-develUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade sssd-proxy | Jul 21, 2020 | Dec 4, 2018 |
| Redhat_linux | — | Upgrade sssd-krb5No solution existsUpgrade sssd-clientUpgrade libsss_autofsUpgrade libsss_simpleifpUpgrade sssd-common-pacUpgrade libipa_hbac-develUpgrade sssd-kcmUpgrade sssdUpgrade libsss_certmap-develUpgrade python-sssUpgrade libsss_certmapUpgrade sssd-libwbclient-develUpgrade sssd-ldapUpgrade python-sss-murmurUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade libsss_idmapUpgrade sssd-adUpgrade python-libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssd-commonUpgrade libsss_simpleifp-develUpgrade sssd-ipaUpgrade libsss_idmap-develUpgrade sssd-winbind-idmapUpgrade sssd-krb5-commonUpgrade sssd-toolsUpgrade sssd-dbusUpgrade sssd-proxyUpgrade libsss_nss_idmap-develUpgrade sssd-polkit-rulesUpgrade sssd-debuginfoUpgrade python-libipa_hbacUpgrade libsss_sudoUpgrade sssd-libwbclient | Aug 7, 2019 | Jan 15, 2019 |
| Suse | — | Upgrade python3-sssd-configUpgrade libipa_hbac-develUpgrade adcli-docUpgrade sssd-commonUpgrade libsss_simpleifp0Upgrade sssd-wbclient-develUpgrade libnfsidmap-sssUpgrade libsss_simpleifp-develUpgrade sssd-dbusUpgrade python3-sss-murmurUpgrade libsss_certmap0Upgrade libsss_certmap-develUpgrade libsss_nss_idmap-develUpgrade sssd-krb5Upgrade sssd-adUpgrade sssd-wbclientUpgrade sssdUpgrade libsss_nss_idmap0Upgrade sssd-32bitUpgrade sssd-ipaUpgrade sssd-winbind-idmapUpgrade libsss_sudoUpgrade sssd-ldapUpgrade python3-ipa_hbacUpgrade libsss_idmap0Upgrade adcliUpgrade sssd-toolsUpgrade python3-sss_nss_idmapUpgrade libsss_idmap-develUpgrade sssd-krb5-commonUpgrade sssd-proxyUpgrade libipa_hbac0Upgrade python-sssd-config | Mar 7, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub