A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 4.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-sss-murmurUpgrade libsss_certmap-develUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifp-develUpgrade python-sssdconfigUpgrade sssd-commonUpgrade libipa_hbac-develUpgrade sssd-adUpgrade sssd-polkit-rulesUpgrade sssd-common-pacUpgrade libsss_sudoUpgrade libsss_idmap-develUpgrade sssd-kcmUpgrade sssd-libwbclient-develUpgrade python-libipa_hbacUpgrade libsss_nss_idmap-develUpgrade sssd-dbusUpgrade sssd-ipaUpgrade sssd-krb5-commonUpgrade sssd-ldapUpgrade sssd-libwbclientUpgrade sssd-krb5Upgrade libsss_nss_idmapUpgrade sssd-winbind-idmapUpgrade sssd-proxyUpgrade sssd-debuginfoUpgrade sssdUpgrade libsss_simpleifpUpgrade libsss_certmapUpgrade sssd-toolsUpgrade python-sssUpgrade sssd-clientUpgrade libsss_idmapUpgrade libipa_hbacUpgrade libsss_autofs | Apr 27, 2020 | Jan 15, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Jan 15, 2019 |
| Centos_linux | — | Upgrade python-sssUpgrade sssd-debuginfoUpgrade python-libsss_nss_idmapUpgrade sssd-krb5-commonUpgrade sssd-common-pacUpgrade sssdUpgrade sssd-krb5Upgrade sssd-adUpgrade libsss_certmapUpgrade libsss_certmap-develUpgrade sssd-polkit-rulesUpgrade python-sssdconfigUpgrade libsss_simpleifp-develUpgrade libipa_hbac-develUpgrade python-sss-murmurUpgrade libipa_hbacUpgrade libsss_nss_idmapUpgrade sssd-libwbclientUpgrade libsss_sudoUpgrade libsss_nss_idmap-develUpgrade sssd-kcmUpgrade sssd-winbind-idmapUpgrade sssd-clientUpgrade python-libipa_hbacUpgrade libsss_simpleifpUpgrade sssd-ipaUpgrade sssd-ldapUpgrade sssd-libwbclient-develUpgrade sssd-dbusUpgrade libsss_idmap-develUpgrade libsss_idmapUpgrade sssd-toolsUpgrade sssd-proxyUpgrade libsss_autofsUpgrade sssd-common | Aug 28, 2019 | Jan 15, 2019 |
| Debian | — | Upgrade sssd | Feb 14, 2019 | Feb 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsss_simpleifpUpgrade python-libsss_nss_idmapUpgrade libsss_autofsUpgrade libsss_certmapUpgrade python-sss-murmurUpgrade sssd-ldapUpgrade python-sssdconfigUpgrade sssdUpgrade python-sssUpgrade sssd-adUpgrade sssd-krb5-commonUpgrade sssd-proxyUpgrade sssd-krb5Upgrade sssd-dbusUpgrade sssd-common-pacUpgrade sssd-clientUpgrade python-libipa_hbacUpgrade libipa_hbacUpgrade sssd-ipaUpgrade libsss_sudoUpgrade sssd-commonUpgrade libsss_nss_idmapUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade libsss_idmap | Jul 23, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsss_nss_idmapUpgrade sssd-common-pacUpgrade sssd-libwbclientUpgrade sssd-clientUpgrade sssd-toolsUpgrade sssd-dbusUpgrade libsss_idmapUpgrade libipa_hbacUpgrade sssd-krb5Upgrade sssd-proxyUpgrade python-libipa_hbacUpgrade libsss_autofsUpgrade libsss_simpleifpUpgrade sssd-commonUpgrade libsss_sudoUpgrade sssd-adUpgrade sssdUpgrade python-sssUpgrade python-sss-murmurUpgrade python-libsss_nss_idmapUpgrade sssd-ldapUpgrade python-sssdconfigUpgrade sssd-krb5-commonUpgrade libsss_certmapUpgrade sssd-ipa | Sep 25, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sssd-ldapUpgrade python-sss-murmurUpgrade libsss_idmapUpgrade libsss_sudoUpgrade sssd-libwbclientUpgrade python-libipa_hbacUpgrade sssd-commonUpgrade sssd-common-pacUpgrade sssd-clientUpgrade sssd-krb5-commonUpgrade libsss_autofsUpgrade sssd-toolsUpgrade python-libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-dbusUpgrade sssdUpgrade sssd-adUpgrade libsss_nss_idmapUpgrade sssd-ipaUpgrade python-sssdconfigUpgrade libsss_simpleifpUpgrade sssd-krb5Upgrade libsss_certmapUpgrade sssd-proxyUpgrade python-sss | Jun 27, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssdUpgrade libsss_simpleifpUpgrade sssd-toolsUpgrade python3-sssUpgrade sssd-commonUpgrade sssd-adUpgrade libsss_autofsUpgrade sssd-ldapUpgrade libsss_certmapUpgrade libsss_idmapUpgrade sssd-krb5-commonUpgrade sssd-krb5Upgrade sssd-kcmUpgrade python3-sssdconfigUpgrade libipa_hbacUpgrade sssd-proxyUpgrade sssd-libwbclientUpgrade sssd-clientUpgrade python3-libipa_hbacUpgrade sssd-dbusUpgrade sssd-ipaUpgrade libsss_nss_idmapUpgrade sssd-common-pacUpgrade python3-libsss_nss_idmapUpgrade libsss_sudoUpgrade python3-sss-murmurUpgrade sssd-winbind-idmapUpgrade sssd-nfs-idmap | Jun 27, 2019 | Jan 15, 2019 |
| Oracle_linux | — | Upgrade python-sss-murmurUpgrade libsss_simpleifp-develUpgrade libsss_certmapUpgrade sssd-krb5Upgrade libsss_certmap-develUpgrade sssd-toolsUpgrade sssd-libwbclient-develUpgrade libsss_autofsUpgrade libsss_idmapUpgrade sssd-ldapUpgrade sssd-common-pacUpgrade libsss_simpleifpUpgrade sssdUpgrade sssd-clientUpgrade libsss_nss_idmap-develUpgrade sssd-krb5-commonUpgrade sssd-winbind-idmapUpgrade python-sssdconfigUpgrade sssd-polkit-rulesUpgrade sssd-ipaUpgrade sssd-dbusUpgrade sssd-libwbclientUpgrade python-libsss_nss_idmapUpgrade libsss_nss_idmapUpgrade sssd-proxyUpgrade libsss_sudoUpgrade libsss_idmap-develUpgrade libipa_hbac-develUpgrade libipa_hbacUpgrade sssd-commonUpgrade sssd-kcmUpgrade python-sssUpgrade sssd-adUpgrade python-libipa_hbac | Jul 21, 2020 | Dec 4, 2018 |
| Redhat_linux | — | Upgrade sssd-krb5-commonUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-proxyUpgrade libsss_nss_idmap-develUpgrade sssd-polkit-rulesUpgrade libsss_sudoUpgrade libsss_idmapUpgrade sssd-toolsUpgrade sssd-dbusUpgrade sssd-winbind-idmapUpgrade python-libsss_nss_idmapUpgrade sssd-adUpgrade sssd-ipaUpgrade libsss_idmap-develUpgrade sssd-debuginfoUpgrade python-libipa_hbacUpgrade sssd-commonUpgrade libsss_simpleifp-develUpgrade python-sssdconfigUpgrade sssd-libwbclientUpgrade sssd-clientUpgrade libsss_certmapUpgrade libipa_hbac-develUpgrade sssd-krb5Upgrade libsss_simpleifpUpgrade libsss_certmap-develUpgrade sssd-ldapUpgrade python-sss-murmurUpgrade python-sssUpgrade sssdUpgrade sssd-libwbclient-develUpgrade libsss_autofsUpgrade sssd-common-pacNo solution existsUpgrade sssd-kcm | Aug 7, 2019 | Jan 15, 2019 |
| Suse | — | Upgrade sssd-toolsUpgrade sssd-krb5-commonUpgrade sssd-adUpgrade python-sssd-configUpgrade sssd-winbind-idmapUpgrade sssd-ldapUpgrade libipa_hbac0Upgrade sssd-proxyUpgrade adcliUpgrade libsss_idmap0Upgrade sssd-32bitUpgrade python3-ipa_hbacUpgrade sssdUpgrade libsss_idmap-develUpgrade libsss_nss_idmap0Upgrade libsss_sudoUpgrade sssd-wbclientUpgrade python3-sss_nss_idmapUpgrade sssd-ipaUpgrade python3-sss-murmurUpgrade libsss_simpleifp0Upgrade sssd-commonUpgrade sssd-krb5Upgrade libsss_nss_idmap-develUpgrade libsss_certmap-develUpgrade adcli-docUpgrade libnfsidmap-sssUpgrade libipa_hbac-develUpgrade python3-sssd-configUpgrade libsss_simpleifp-develUpgrade sssd-wbclient-develUpgrade sssd-dbusUpgrade libsss_certmap0 | Mar 7, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub