A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 4.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-krb5-commonUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade sssd-dbusUpgrade python-libsss_nss_idmapUpgrade sssd-ldapUpgrade libsss_simpleifp-develUpgrade sssd-ipaUpgrade libsss_certmap-develUpgrade sssd-common-pacUpgrade libsss_nss_idmap-develUpgrade libipa_hbac-develUpgrade sssd-kcmUpgrade python-libipa_hbacUpgrade libsss_sudoUpgrade sssd-adUpgrade libsss_idmap-develUpgrade sssd-libwbclient-develUpgrade sssd-commonUpgrade sssd-polkit-rulesUpgrade libipa_hbacUpgrade libsss_idmapUpgrade libsss_nss_idmapUpgrade sssd-clientUpgrade python-sssUpgrade libsss_certmapUpgrade sssd-proxyUpgrade sssd-winbind-idmapUpgrade sssd-debuginfoUpgrade sssdUpgrade sssd-toolsUpgrade libsss_simpleifpUpgrade sssd-libwbclientUpgrade libsss_autofsUpgrade sssd-krb5 | Apr 27, 2020 | Jan 15, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Jan 15, 2019 |
| Centos_linux | — | Upgrade sssd-proxyUpgrade sssd-toolsUpgrade sssd-dbusUpgrade sssd-ldapUpgrade sssd-ipaUpgrade sssd-libwbclient-develUpgrade libsss_idmap-develUpgrade libsss_autofsUpgrade python-libipa_hbacUpgrade libsss_simpleifpUpgrade sssd-winbind-idmapUpgrade sssd-clientUpgrade sssd-commonUpgrade libsss_idmapUpgrade python-sssUpgrade python-sss-murmurUpgrade sssd-common-pacUpgrade sssd-kcmUpgrade libipa_hbac-develUpgrade sssd-libwbclientUpgrade libsss_certmap-develUpgrade python-libsss_nss_idmapUpgrade sssdUpgrade sssd-debuginfoUpgrade libsss_certmapUpgrade libsss_nss_idmap-develUpgrade sssd-adUpgrade sssd-krb5-commonUpgrade sssd-krb5Upgrade libsss_simpleifp-develUpgrade libipa_hbacUpgrade python-sssdconfigUpgrade sssd-polkit-rulesUpgrade libsss_sudoUpgrade libsss_nss_idmap | Aug 28, 2019 | Jan 15, 2019 |
| Debian | — | Upgrade sssd | Feb 14, 2019 | Feb 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sssd-krb5-commonUpgrade libsss_simpleifpUpgrade libsss_certmapUpgrade sssdUpgrade python-sssdconfigUpgrade python-sss-murmurUpgrade sssd-ldapUpgrade python-sssUpgrade sssd-adUpgrade sssd-proxyUpgrade sssd-krb5Upgrade libsss_autofsUpgrade python-libsss_nss_idmapUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade sssd-libwbclientUpgrade sssd-ipaUpgrade libsss_idmapUpgrade libsss_sudoUpgrade sssd-commonUpgrade sssd-clientUpgrade python-libipa_hbacUpgrade sssd-toolsUpgrade sssd-dbusUpgrade libipa_hbac | Jul 23, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libipa_hbacUpgrade libsss_sudoUpgrade libsss_simpleifpUpgrade sssd-commonUpgrade sssdUpgrade sssd-ipaUpgrade python-libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssd-ldapUpgrade libsss_certmapUpgrade sssd-krb5-commonUpgrade python-sss-murmurUpgrade sssd-adUpgrade python-sssUpgrade sssd-common-pacUpgrade libsss_autofsUpgrade sssd-libwbclientUpgrade python-libipa_hbacUpgrade libsss_idmapUpgrade sssd-dbusUpgrade sssd-clientUpgrade sssd-toolsUpgrade libsss_nss_idmapUpgrade sssd-proxyUpgrade sssd-krb5 | Sep 25, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sssd-proxyUpgrade sssd-ipaUpgrade libsss_simpleifpUpgrade sssd-adUpgrade sssdUpgrade libsss_nss_idmapUpgrade python-sssUpgrade python-sssdconfigUpgrade libsss_certmapUpgrade sssd-krb5Upgrade libsss_idmapUpgrade sssd-krb5-commonUpgrade sssd-libwbclientUpgrade sssd-commonUpgrade libsss_sudoUpgrade sssd-ldapUpgrade sssd-dbusUpgrade libipa_hbacUpgrade sssd-toolsUpgrade python-libsss_nss_idmapUpgrade sssd-clientUpgrade python-libipa_hbacUpgrade python-sss-murmurUpgrade sssd-common-pacUpgrade libsss_autofs | Jun 27, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssd-nfs-idmapUpgrade sssd-winbind-idmapUpgrade libsss_sudoUpgrade python3-libsss_nss_idmapUpgrade sssd-common-pacUpgrade sssd-ipaUpgrade libipa_hbacUpgrade sssd-dbusUpgrade sssd-clientUpgrade sssd-proxyUpgrade libsss_nss_idmapUpgrade sssd-libwbclientUpgrade python3-libipa_hbacUpgrade python3-sss-murmurUpgrade python3-sssdconfigUpgrade sssd-adUpgrade sssdUpgrade sssd-toolsUpgrade libsss_idmapUpgrade python3-sssUpgrade libsss_simpleifpUpgrade libsss_autofsUpgrade libsss_certmapUpgrade sssd-commonUpgrade sssd-kcmUpgrade sssd-ldapUpgrade sssd-krb5Upgrade sssd-krb5-common | Jun 27, 2019 | Jan 15, 2019 |
| Oracle_linux | — | Upgrade libsss_sudoUpgrade libipa_hbacUpgrade libsss_nss_idmapUpgrade python-libipa_hbacUpgrade sssd-ipaUpgrade sssd-polkit-rulesUpgrade sssd-commonUpgrade libsss_idmap-develUpgrade sssd-kcmUpgrade python-libsss_nss_idmapUpgrade sssd-proxyUpgrade libipa_hbac-develUpgrade sssd-libwbclientUpgrade sssd-krb5-commonUpgrade libsss_idmapUpgrade sssdUpgrade sssd-krb5Upgrade libsss_certmapUpgrade libsss_autofsUpgrade sssd-clientUpgrade sssd-ldapUpgrade python-sss-murmurUpgrade libsss_nss_idmap-develUpgrade sssd-common-pacUpgrade libsss_simpleifpUpgrade sssd-toolsUpgrade libsss_certmap-develUpgrade libsss_simpleifp-develUpgrade sssd-libwbclient-devel | Jul 21, 2020 | Dec 4, 2018 |
| Redhat_linux | — | Upgrade libipa_hbac-develUpgrade sssdUpgrade sssd-libwbclient-develUpgrade sssd-krb5Upgrade sssd-clientUpgrade python-sss-murmurUpgrade libsss_certmapUpgrade python-sssUpgrade sssd-kcmUpgrade libsss_simpleifpUpgrade libsss_autofsUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade libsss_certmap-develNo solution existsUpgrade sssd-adUpgrade sssd-ipaUpgrade sssd-libwbclientUpgrade python-libipa_hbacUpgrade libsss_sudoUpgrade sssd-debuginfoUpgrade sssd-proxyUpgrade libsss_idmapUpgrade sssd-commonUpgrade libsss_idmap-develUpgrade python-sssdconfigUpgrade libsss_simpleifp-develUpgrade sssd-krb5-commonUpgrade libsss_nss_idmap-develUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-toolsUpgrade sssd-polkit-rulesUpgrade python-libsss_nss_idmapUpgrade sssd-dbusUpgrade sssd-winbind-idmap | Aug 7, 2019 | Jan 15, 2019 |
| Suse | — | Upgrade adcli-docUpgrade libnfsidmap-sssUpgrade sssd-commonUpgrade libsss_simpleifp0Upgrade python3-sssd-configUpgrade sssd-dbusUpgrade sssd-wbclient-develUpgrade libsss_certmap-develUpgrade libsss_nss_idmap-develUpgrade python3-sss-murmurUpgrade libsss_simpleifp-develUpgrade libipa_hbac-develUpgrade sssd-krb5Upgrade libsss_certmap0Upgrade sssd-proxyUpgrade adcliUpgrade python3-sss_nss_idmapUpgrade sssd-adUpgrade libsss_idmap-develUpgrade libipa_hbac0Upgrade sssd-wbclientUpgrade sssd-ldapUpgrade libsss_nss_idmap0Upgrade sssd-winbind-idmapUpgrade python3-ipa_hbacUpgrade sssd-krb5-commonUpgrade sssd-toolsUpgrade libsss_idmap0Upgrade sssd-32bitUpgrade libsss_sudoUpgrade sssd-ipaUpgrade sssdUpgrade python-sssd-config | Mar 7, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub