A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 4.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-libwbclientUpgrade libipa_hbacUpgrade libsss_simpleifpUpgrade sssd-debuginfoUpgrade sssd-krb5Upgrade libsss_idmapUpgrade sssd-winbind-idmapUpgrade libsss_nss_idmapUpgrade sssd-clientUpgrade sssd-proxyUpgrade libsss_certmapUpgrade libsss_autofsUpgrade sssdUpgrade sssd-toolsUpgrade python-sssUpgrade sssd-adUpgrade libipa_hbac-develUpgrade sssd-kcmUpgrade sssd-libwbclient-develUpgrade sssd-polkit-rulesUpgrade sssd-commonUpgrade python-libsss_nss_idmapUpgrade libsss_nss_idmap-develUpgrade libsss_idmap-develUpgrade python-libipa_hbacUpgrade libsss_sudoUpgrade python-sssdconfigUpgrade sssd-ldapUpgrade sssd-ipaUpgrade sssd-krb5-commonUpgrade python-sss-murmurUpgrade libsss_certmap-develUpgrade sssd-common-pacUpgrade libsss_simpleifp-develUpgrade sssd-dbus | Apr 27, 2020 | Jan 15, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Jan 15, 2019 |
| Centos_linux | — | Upgrade sssd-krb5Upgrade sssd-common-pacUpgrade libipa_hbacUpgrade sssd-krb5-commonUpgrade sssd-polkit-rulesUpgrade libsss_nss_idmap-develUpgrade libsss_nss_idmapUpgrade sssd-libwbclientUpgrade sssd-adUpgrade libsss_certmap-develUpgrade libsss_certmapUpgrade libipa_hbac-develUpgrade sssd-kcmUpgrade libsss_simpleifp-develUpgrade sssdUpgrade sssd-debuginfoUpgrade python-sssUpgrade libsss_sudoUpgrade python-libsss_nss_idmapUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade sssd-dbusUpgrade python-libipa_hbacUpgrade sssd-commonUpgrade sssd-toolsUpgrade sssd-proxyUpgrade libsss_idmap-develUpgrade sssd-winbind-idmapUpgrade sssd-libwbclient-develUpgrade sssd-clientUpgrade sssd-ldapUpgrade sssd-ipaUpgrade libsss_autofsUpgrade libsss_simpleifpUpgrade libsss_idmap | Aug 28, 2019 | Jan 15, 2019 |
| Debian | — | Upgrade sssd | Feb 14, 2019 | Feb 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sssd-dbusUpgrade sssd-commonUpgrade libipa_hbacUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade sssd-libwbclientUpgrade sssd-toolsUpgrade libsss_sudoUpgrade sssd-clientUpgrade python-libipa_hbacUpgrade libsss_idmapUpgrade sssd-ipaUpgrade sssd-proxyUpgrade sssd-krb5Upgrade sssd-adUpgrade python-sssUpgrade python-libsss_nss_idmapUpgrade libsss_autofsUpgrade python-sssdconfigUpgrade libsss_simpleifpUpgrade libsss_certmapUpgrade sssd-ldapUpgrade python-sss-murmurUpgrade sssd-krb5-commonUpgrade sssd | Jul 23, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sssd-libwbclientUpgrade libsss_autofsUpgrade libipa_hbacUpgrade sssd-clientUpgrade sssd-krb5Upgrade sssd-toolsUpgrade sssd-proxyUpgrade libsss_idmapUpgrade sssd-dbusUpgrade python-libipa_hbacUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade libsss_certmapUpgrade libsss_sudoUpgrade sssdUpgrade python-sssdconfigUpgrade python-sss-murmurUpgrade sssd-ldapUpgrade python-libsss_nss_idmapUpgrade sssd-commonUpgrade sssd-ipaUpgrade libsss_simpleifpUpgrade sssd-krb5-commonUpgrade sssd-adUpgrade python-sss | Sep 25, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsss_certmapUpgrade sssd-proxyUpgrade sssd-ipaUpgrade sssdUpgrade sssd-krb5Upgrade python-sssdconfigUpgrade python-sssUpgrade libsss_nss_idmapUpgrade sssd-adUpgrade libsss_simpleifpUpgrade libsss_sudoUpgrade sssd-common-pacUpgrade sssd-clientUpgrade python-libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-ldapUpgrade sssd-commonUpgrade sssd-krb5-commonUpgrade sssd-dbusUpgrade sssd-libwbclientUpgrade python-sss-murmurUpgrade sssd-toolsUpgrade libsss_idmapUpgrade libsss_autofsUpgrade python-libipa_hbac | Jun 27, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssd-winbind-idmapUpgrade sssd-libwbclientUpgrade python3-libipa_hbacUpgrade sssd-clientUpgrade python3-sssdconfigUpgrade sssd-dbusUpgrade libsss_sudoUpgrade sssd-nfs-idmapUpgrade sssd-ipaUpgrade sssd-proxyUpgrade python3-libsss_nss_idmapUpgrade libipa_hbacUpgrade python3-sss-murmurUpgrade libsss_nss_idmapUpgrade sssd-common-pacUpgrade sssd-krb5-commonUpgrade libsss_idmapUpgrade libsss_autofsUpgrade sssd-kcmUpgrade sssd-adUpgrade python3-sssUpgrade libsss_simpleifpUpgrade libsss_certmapUpgrade sssd-toolsUpgrade sssdUpgrade sssd-commonUpgrade sssd-krb5Upgrade sssd-ldap | Jun 27, 2019 | Jan 15, 2019 |
| Oracle_linux | — | Upgrade sssd-ipaUpgrade sssd-winbind-idmapUpgrade sssd-dbusUpgrade python-libsss_nss_idmapUpgrade python-sssUpgrade python-libipa_hbacUpgrade sssd-adUpgrade sssd-libwbclientUpgrade libsss_idmap-develUpgrade sssd-commonUpgrade libipa_hbacUpgrade sssd-kcmUpgrade libipa_hbac-develUpgrade python-sssdconfigUpgrade sssd-polkit-rulesUpgrade libsss_nss_idmapUpgrade libsss_sudoUpgrade sssd-krb5-commonUpgrade sssd-proxyUpgrade python-sss-murmurUpgrade libsss_nss_idmap-develUpgrade sssd-common-pacUpgrade sssdUpgrade libsss_simpleifp-develUpgrade libsss_certmap-develUpgrade libsss_idmapUpgrade sssd-ldapUpgrade sssd-clientUpgrade libsss_simpleifpUpgrade libsss_autofsUpgrade sssd-toolsUpgrade libsss_certmapUpgrade sssd-libwbclient-develUpgrade sssd-krb5 | Jul 21, 2020 | Dec 4, 2018 |
| Redhat_linux | — | Upgrade python-libsss_nss_idmapUpgrade sssd-debuginfoUpgrade sssd-polkit-rulesUpgrade sssd-adUpgrade sssd-winbind-idmapUpgrade python-sssdconfigUpgrade sssd-dbusUpgrade libsss_nss_idmap-develUpgrade sssd-proxyUpgrade libsss_simpleifp-develUpgrade libsss_nss_idmapUpgrade sssd-commonUpgrade sssd-ipaUpgrade sssd-toolsUpgrade libsss_idmapUpgrade python-libipa_hbacUpgrade sssd-libwbclientUpgrade libipa_hbacUpgrade libsss_sudoUpgrade sssd-krb5-commonUpgrade libsss_idmap-develUpgrade sssd-krb5No solution existsUpgrade libsss_certmap-develUpgrade sssd-libwbclient-develUpgrade python-sss-murmurUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade sssd-clientUpgrade libsss_certmapUpgrade libipa_hbac-develUpgrade sssdUpgrade sssd-kcmUpgrade python-sssUpgrade libsss_autofsUpgrade libsss_simpleifp | Aug 7, 2019 | Jan 15, 2019 |
| Suse | — | Upgrade libipa_hbac-develUpgrade libsss_nss_idmap-develUpgrade libsss_certmap0Upgrade python3-sss-murmurUpgrade sssd-krb5Upgrade libnfsidmap-sssUpgrade python3-sssd-configUpgrade sssd-wbclient-develUpgrade adcli-docUpgrade sssd-commonUpgrade libsss_simpleifp0Upgrade libsss_certmap-develUpgrade sssd-dbusUpgrade libsss_simpleifp-develUpgrade libsss_nss_idmap0Upgrade sssdUpgrade libsss_sudoUpgrade sssd-wbclientUpgrade libsss_idmap0Upgrade sssd-32bitUpgrade sssd-ldapUpgrade sssd-ipaUpgrade python3-ipa_hbacUpgrade sssd-winbind-idmapUpgrade sssd-adUpgrade adcliUpgrade libipa_hbac0Upgrade sssd-proxyUpgrade sssd-toolsUpgrade libsss_idmap-develUpgrade sssd-krb5-commonUpgrade python3-sss_nss_idmapUpgrade python-sssd-config | Mar 7, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub