A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 4.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-libwbclient-develUpgrade sssd-kcmUpgrade python-libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssd-common-pacUpgrade sssd-commonUpgrade python-libipa_hbacUpgrade libsss_certmap-develUpgrade libipa_hbac-develUpgrade libsss_nss_idmap-develUpgrade sssd-adUpgrade libsss_simpleifp-develUpgrade sssd-polkit-rulesUpgrade python-sss-murmurUpgrade libsss_idmap-develUpgrade sssd-dbusUpgrade libsss_sudoUpgrade sssd-ldapUpgrade sssd-krb5-commonUpgrade sssd-ipaUpgrade sssd-debuginfoUpgrade libsss_autofsUpgrade libipa_hbacUpgrade libsss_nss_idmapUpgrade libsss_idmapUpgrade sssd-toolsUpgrade sssdUpgrade sssd-winbind-idmapUpgrade sssd-proxyUpgrade sssd-libwbclientUpgrade libsss_simpleifpUpgrade python-sssUpgrade sssd-clientUpgrade libsss_certmapUpgrade sssd-krb5 | Apr 27, 2020 | Jan 15, 2019 |
| Amazon_linux | — | Upgrade sssd | Oct 11, 2019 | Jan 15, 2019 |
| Centos_linux | — | Upgrade sssd-clientUpgrade sssd-ipaUpgrade libsss_simpleifpUpgrade sssd-toolsUpgrade sssd-proxyUpgrade sssd-winbind-idmapUpgrade libsss_idmap-develUpgrade python-libipa_hbacUpgrade libsss_autofsUpgrade sssd-libwbclient-develUpgrade sssd-ldapUpgrade sssd-dbusUpgrade libsss_idmapUpgrade sssd-commonUpgrade libipa_hbacUpgrade sssd-adUpgrade sssd-polkit-rulesUpgrade sssdUpgrade python-sssUpgrade python-libsss_nss_idmapUpgrade libsss_nss_idmapUpgrade sssd-kcmUpgrade libsss_certmap-develUpgrade sssd-libwbclientUpgrade python-sssdconfigUpgrade libsss_certmapUpgrade libipa_hbac-develUpgrade libsss_simpleifp-develUpgrade sssd-common-pacUpgrade sssd-krb5-commonUpgrade sssd-krb5Upgrade libsss_nss_idmap-develUpgrade libsss_sudoUpgrade python-sss-murmurUpgrade sssd-debuginfo | Aug 28, 2019 | Jan 15, 2019 |
| Debian | — | Upgrade sssd | Feb 14, 2019 | Feb 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sssd-clientUpgrade libsss_idmapUpgrade sssd-libwbclientUpgrade sssd-commonUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade python-libipa_hbacUpgrade libipa_hbacUpgrade sssd-common-pacUpgrade sssd-dbusUpgrade sssd-toolsUpgrade sssd-ipaUpgrade libsss_certmapUpgrade libsss_autofsUpgrade python-sssdconfigUpgrade sssdUpgrade libsss_simpleifpUpgrade python-libsss_nss_idmapUpgrade sssd-krb5-commonUpgrade sssd-ldapUpgrade python-sss-murmurUpgrade sssd-proxyUpgrade sssd-krb5Upgrade sssd-adUpgrade python-sss | Jul 23, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sssd-toolsUpgrade python-libipa_hbacUpgrade sssd-krb5Upgrade libsss_autofsUpgrade libipa_hbacUpgrade sssd-proxyUpgrade libsss_idmapUpgrade libsss_nss_idmapUpgrade sssd-common-pacUpgrade sssd-dbusUpgrade sssd-libwbclientUpgrade sssd-clientUpgrade sssd-commonUpgrade libsss_sudoUpgrade sssd-adUpgrade python-sss-murmurUpgrade python-libsss_nss_idmapUpgrade sssd-ldapUpgrade python-sssdconfigUpgrade sssd-krb5-commonUpgrade sssd-ipaUpgrade libsss_simpleifpUpgrade libsss_certmapUpgrade python-sssUpgrade sssd | Sep 25, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sssd-common-pacUpgrade sssd-toolsUpgrade sssd-clientUpgrade sssd-dbusUpgrade libsss_idmapUpgrade sssd-krb5-commonUpgrade libipa_hbacUpgrade python-libipa_hbacUpgrade sssd-commonUpgrade sssd-ldapUpgrade python-libsss_nss_idmapUpgrade libsss_sudoUpgrade sssd-libwbclientUpgrade libsss_autofsUpgrade python-sss-murmurUpgrade libsss_certmapUpgrade sssd-adUpgrade python-sssdconfigUpgrade python-sssUpgrade sssdUpgrade sssd-proxyUpgrade sssd-krb5Upgrade libsss_nss_idmapUpgrade libsss_simpleifpUpgrade sssd-ipa | Jun 27, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssd-commonUpgrade python3-sssUpgrade libsss_certmapUpgrade sssd-adUpgrade sssdUpgrade sssd-toolsUpgrade libsss_autofsUpgrade sssd-krb5Upgrade sssd-ldapUpgrade libsss_idmapUpgrade sssd-krb5-commonUpgrade sssd-kcmUpgrade libsss_simpleifpUpgrade sssd-ipaUpgrade python3-libipa_hbacUpgrade sssd-libwbclientUpgrade sssd-proxyUpgrade sssd-dbusUpgrade sssd-common-pacUpgrade sssd-clientUpgrade sssd-winbind-idmapUpgrade libipa_hbacUpgrade libsss_nss_idmapUpgrade sssd-nfs-idmapUpgrade python3-sss-murmurUpgrade python3-sssdconfigUpgrade python3-libsss_nss_idmapUpgrade libsss_sudo | Jun 27, 2019 | Jan 15, 2019 |
| Oracle_linux | — | Upgrade python-sss-murmurUpgrade libsss_simpleifpUpgrade sssdUpgrade sssd-clientUpgrade sssd-ldapUpgrade sssd-krb5Upgrade sssd-libwbclient-develUpgrade sssd-toolsUpgrade libsss_certmapUpgrade sssd-common-pacUpgrade libsss_nss_idmap-develUpgrade libsss_idmapUpgrade libsss_simpleifp-develUpgrade libsss_certmap-develUpgrade libsss_autofsUpgrade libipa_hbac-develUpgrade sssd-kcmUpgrade python-sssdconfigUpgrade python-sssUpgrade sssd-polkit-rulesUpgrade sssd-commonUpgrade libsss_idmap-develUpgrade python-libsss_nss_idmapUpgrade sssd-proxyUpgrade sssd-krb5-commonUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade sssd-dbusUpgrade sssd-winbind-idmapUpgrade sssd-ipaUpgrade sssd-adUpgrade python-libipa_hbacUpgrade sssd-libwbclient | Jul 21, 2020 | Dec 4, 2018 |
| Redhat_linux | — | Upgrade sssd-dbusUpgrade libipa_hbacUpgrade sssd-winbind-idmapUpgrade sssd-polkit-rulesUpgrade sssd-krb5-commonUpgrade libsss_idmap-develUpgrade python-libsss_nss_idmapUpgrade sssd-proxyUpgrade libsss_nss_idmapUpgrade sssd-ipaUpgrade libsss_idmapUpgrade libsss_simpleifp-develUpgrade libsss_sudoUpgrade sssd-debuginfoUpgrade sssd-commonUpgrade python-sssdconfigUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade python-libipa_hbacUpgrade sssd-adUpgrade libsss_nss_idmap-develUpgrade python-sssUpgrade sssd-common-pacNo solution existsUpgrade sssdUpgrade python-sss-murmurUpgrade libsss_certmapUpgrade libipa_hbac-develUpgrade sssd-kcmUpgrade libsss_autofsUpgrade libsss_simpleifpUpgrade sssd-ldapUpgrade libsss_certmap-develUpgrade sssd-krb5Upgrade sssd-clientUpgrade sssd-libwbclient-devel | Aug 7, 2019 | Jan 15, 2019 |
| Suse | — | Upgrade libsss_idmap-develUpgrade sssd-wbclientUpgrade python-sssd-configUpgrade adcliUpgrade sssd-krb5-commonUpgrade sssd-toolsUpgrade sssdUpgrade libsss_sudoUpgrade libipa_hbac0Upgrade libsss_idmap0Upgrade sssd-32bitUpgrade libsss_nss_idmap0Upgrade sssd-ipaUpgrade sssd-adUpgrade python3-ipa_hbacUpgrade sssd-ldapUpgrade sssd-proxyUpgrade python3-sss_nss_idmapUpgrade sssd-winbind-idmapUpgrade libsss_certmap0Upgrade libipa_hbac-develUpgrade libsss_certmap-develUpgrade sssd-dbusUpgrade libsss_simpleifp-develUpgrade adcli-docUpgrade python3-sss-murmurUpgrade sssd-krb5Upgrade python3-sssd-configUpgrade sssd-wbclient-develUpgrade libnfsidmap-sssUpgrade sssd-commonUpgrade libsss_simpleifp0Upgrade libsss_nss_idmap-devel | Mar 7, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub