A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsss_nss_idmap-devel | May 4, 2022 | Dec 23, 2021 |
| Amazon Linux Ami 2 | — | Upgrade sssd-polkit-rulesUpgrade sssd-krb5Upgrade sssdUpgrade sssd-debuginfoUpgrade libipa_hbacUpgrade libsss_nss_idmapUpgrade python-sssUpgrade libsss_certmapUpgrade libsss_simpleifpUpgrade sssd-proxyUpgrade libsss_sudoUpgrade sssd-ipaUpgrade sssd-clientUpgrade sssd-kcmUpgrade libsss_certmap-develUpgrade sssd-libwbclientUpgrade sssd-adUpgrade python-sss-murmurUpgrade sssd-krb5-commonUpgrade libsss_idmap-develUpgrade python-libsss_nss_idmapUpgrade sssd-toolsUpgrade python-libipa_hbacUpgrade sssd-libwbclient-develUpgrade sssd-ldapUpgrade sssd-common-pacUpgrade libipa_hbac-develUpgrade libsss_autofsUpgrade libsss_idmapUpgrade sssd-dbusUpgrade libsss_nss_idmap-develUpgrade libsss_simpleifp-develUpgrade sssd-commonUpgrade sssd-winbind-idmapUpgrade python-sssdconfig | Oct 7, 2021 | Oct 7, 2021 |
| Amazon_linux | — | Upgrade sssd | Oct 5, 2021 | Aug 17, 2021 |
| Centos_linux | — | Upgrade libsss_sudoUpgrade sssd-libwbclientUpgrade python-sssUpgrade libipa_hbacUpgrade python3-libsss_nss_idmap-debuginfoUpgrade sssd-client-debuginfoUpgrade libipa_hbac-debuginfoUpgrade sssd-common-pacUpgrade libsss_certmap-debuginfoUpgrade libsss_nss_idmap-debuginfoUpgrade sssd-winbind-idmapUpgrade sssd-clientUpgrade libsss_idmap-develUpgrade sssd-nfs-idmap-debuginfoUpgrade python-libipa_hbacUpgrade libsss_nss_idmapUpgrade sssd-ipa-debuginfoUpgrade sssd-polkit-rulesUpgrade sssd-debuginfoUpgrade sssd-common-pac-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade sssd-krb5-common-debuginfoUpgrade sssd-commonUpgrade python-sssdconfigUpgrade libsss_nss_idmap-develUpgrade libsss_idmapUpgrade libsss_idmap-debuginfoUpgrade python3-sss-debuginfoUpgrade python3-libipa_hbacUpgrade python3-sssdconfigUpgrade libipa_hbac-develUpgrade sssd-ipaUpgrade python3-sss-murmur-debuginfoUpgrade libsss_simpleifp-debuginfoUpgrade sssd-common-debuginfoUpgrade python3-sss-murmurUpgrade sssd-dbus-debuginfoUpgrade sssd-ad-debuginfoUpgrade sssd-dbusUpgrade python3-libipa_hbac-debuginfoUpgrade sssd-toolsUpgrade sssd-kcm-debuginfoUpgrade libsss_simpleifp-develUpgrade libsss_autofsUpgrade sssd-proxy-debuginfoUpgrade sssd-libwbclient-debuginfoUpgrade sssd-krb5-debuginfoUpgrade python-libsss_nss_idmapUpgrade libsss_certmapUpgrade sssd-adUpgrade sssd-libwbclient-develUpgrade sssd-debugsourceUpgrade sssd-krb5-commonUpgrade libsss_simpleifpUpgrade sssd-krb5Upgrade sssd-ldap-debuginfoUpgrade sssd-ldapUpgrade python-sss-murmurUpgrade libsss_autofs-debuginfoUpgrade sssd-kcmUpgrade python3-libsss_nss_idmapUpgrade sssdUpgrade sssd-nfs-idmapUpgrade libsss_certmap-develUpgrade sssd-proxyUpgrade python3-sssUpgrade libsss_sudo-debuginfoUpgrade sssd-tools-debuginfo | Aug 17, 2021 | Aug 16, 2021 |
| Debian | — | Upgrade sssd | Sep 17, 2021 | Sep 17, 2021 |
| Gentoo Linux | — | Upgrade sys-auth/sssd. | Jul 3, 2024 | Dec 23, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sssd-proxyUpgrade sssd-libwbclientUpgrade sssd-krb5Upgrade libsss_nss_idmapUpgrade sssd-toolsUpgrade libsss_autofsUpgrade libsss_idmapUpgrade libsss_simpleifpUpgrade sssd-clientUpgrade libsss_sudoUpgrade python-sssUpgrade libsss_certmapUpgrade sssd-ldapUpgrade sssd-ipaUpgrade sssd-common-pacUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade sssdUpgrade python-libipa_hbacUpgrade sssd-krb5-commonUpgrade sssd-commonUpgrade sssd-dbusUpgrade python-libsss_nss_idmapUpgrade sssd-adUpgrade libipa_hbac | Nov 12, 2021 | Nov 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-sss-murmurUpgrade sssd-adUpgrade sssd-toolsUpgrade sssd-krb5Upgrade python2-sssUpgrade python2-libipa_hbacUpgrade sssd-kcmUpgrade python3-sssUpgrade python2-sssdconfigUpgrade libsss_idmapUpgrade sssdUpgrade sssd-dbusUpgrade sssd-ldapUpgrade sssd-commonUpgrade sssd-krb5-commonUpgrade libsss_autofsUpgrade sssd-common-pacUpgrade sssd-winbind-idmapUpgrade libsss_certmapUpgrade libsss_simpleifpUpgrade sssd-proxyUpgrade python3-libsss_nss_idmapUpgrade python2-sss-murmurUpgrade libsss_sudoUpgrade python3-libipa_hbacUpgrade python3-sssdconfigUpgrade libsss_nss_idmapUpgrade python2-libsss_nss_idmapUpgrade sssd-ipaUpgrade sssd-libwbclientUpgrade sssd-clientUpgrade libipa_hbacUpgrade sssd-nfs-idmap | Nov 2, 2021 | Nov 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sssdUpgrade python3-sssd | Nov 12, 2021 | Nov 2, 2021 |
| Oracle_linux | — | Upgrade sssd-commonUpgrade sssd-proxyUpgrade python3-sssUpgrade sssd-adUpgrade python3-libipa_hbacUpgrade libsss_simpleifp-develUpgrade libsss_autofsUpgrade python3-sss-murmurUpgrade python-sss-murmurUpgrade sssd-libwbclient-develUpgrade sssd-krb5-commonUpgrade sssd-dbusUpgrade sssd-libwbclientUpgrade libsss_nss_idmap-develUpgrade python-libsss_nss_idmapUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade python-libipa_hbacUpgrade sssd-winbind-idmapUpgrade libsss_idmapUpgrade sssd-toolsUpgrade sssd-kcmUpgrade libsss_simpleifpUpgrade python3-libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssd-ipaUpgrade libipa_hbacUpgrade sssd-krb5Upgrade libsss_idmap-develUpgrade libipa_hbac-develUpgrade sssdUpgrade python3-sssdconfigUpgrade libsss_certmap-develUpgrade libsss_nss_idmapUpgrade sssd-clientUpgrade sssd-polkit-rulesUpgrade sssd-nfs-idmapUpgrade python-sssUpgrade libsss_certmapUpgrade libsss_sudo | Aug 17, 2021 | Aug 16, 2021 |
| Redhat_linux | — | Upgrade sssd-libwbclientUpgrade libipa_hbacUpgrade sssd-debuginfoUpgrade sssd-tools-debuginfoUpgrade sssd-common-debuginfoUpgrade python3-sss-murmurUpgrade sssd-proxyUpgrade libsss_certmap-debuginfoUpgrade python3-sss-debuginfoUpgrade sssd-ad-debuginfoUpgrade sssd-debugsourceUpgrade sssd-dbus-debuginfoUpgrade sssd-commonUpgrade sssd-common-pacUpgrade libsss_nss_idmapUpgrade sssd-krb5Upgrade sssd-clientUpgrade sssd-nfs-idmap-debuginfoUpgrade libsss_autofsUpgrade libsss_idmapUpgrade sssd-dbusUpgrade sssd-krb5-common-debuginfoUpgrade sssd-nfs-idmapUpgrade libsss_simpleifp-debuginfoUpgrade libsss_certmapUpgrade sssd-proxy-debuginfoUpgrade sssd-ldap-debuginfoUpgrade python3-libipa_hbacUpgrade libsss_autofs-debuginfoUpgrade sssd-toolsUpgrade python3-sssdconfigUpgrade sssd-krb5-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade libipa_hbac-debuginfoUpgrade python-sss-murmurUpgrade libsss_idmap-develUpgrade libsss_nss_idmap-develUpgrade python-sssUpgrade python-libipa_hbacUpgrade sssd-libwbclient-debuginfoUpgrade sssd-adUpgrade libsss_sudo-debuginfoUpgrade sssd-kcmUpgrade python3-libsss_nss_idmapUpgrade libipa_hbac-develNo solution existsUpgrade libsss_simpleifpUpgrade sssd-polkit-rulesUpgrade sssd-kcm-debuginfoUpgrade sssd-common-pac-debuginfoUpgrade sssd-krb5-commonUpgrade sssd-libwbclient-develUpgrade libsss_nss_idmap-debuginfoUpgrade python3-libipa_hbac-debuginfoUpgrade libsss_sudoUpgrade python-libsss_nss_idmapUpgrade python3-sssUpgrade python3-libsss_nss_idmap-debuginfoUpgrade sssdUpgrade sssd-winbind-idmapUpgrade libsss_idmap-debuginfoUpgrade sssd-client-debuginfoUpgrade sssd-ipa-debuginfoUpgrade libsss_simpleifp-develUpgrade sssd-ldapUpgrade python-sssdconfigUpgrade sssd-ipaUpgrade libsss_certmap-develUpgrade python3-sss-murmur-debuginfo | Aug 17, 2021 | Aug 16, 2021 |
| Rocky_linux | — | Upgrade python3-sss-murmur-debuginfoUpgrade sssd-commonUpgrade sssd-ipaUpgrade sssd-ldapUpgrade sssd-common-pac-debuginfoUpgrade libsss_autofs-debuginfoUpgrade libsss_sudoUpgrade sssd-krb5-debuginfoUpgrade libsss_simpleifp-debuginfoUpgrade python3-sss-murmurUpgrade python3-sssUpgrade sssd-ldap-debuginfoUpgrade sssd-client-debuginfoUpgrade sssd-adUpgrade sssd-dbusUpgrade libsss_nss_idmap-develUpgrade libipa_hbacUpgrade libipa_hbac-debuginfoUpgrade libsss_certmapUpgrade sssd-krb5-commonUpgrade libsss_certmap-debuginfoUpgrade sssd-kcmUpgrade libsss_nss_idmap-debuginfoUpgrade python3-libipa_hbac-debuginfoUpgrade sssd-polkit-rulesUpgrade libsss_idmap-debuginfoUpgrade sssd-common-pacUpgrade sssd-libwbclient-debuginfoUpgrade sssd-kcm-debuginfoUpgrade python3-libsss_nss_idmapUpgrade sssd-winbind-idmap-debuginfoUpgrade sssd-debuginfoUpgrade sssd-dbus-debuginfoUpgrade libsss_simpleifpUpgrade sssd-debugsourceUpgrade sssd-winbind-idmapUpgrade sssd-krb5Upgrade sssd-krb5-common-debuginfoUpgrade sssd-common-debuginfoUpgrade libsss_sudo-debuginfoUpgrade sssd-libwbclientUpgrade libsss_nss_idmapUpgrade sssd-tools-debuginfoUpgrade sssdUpgrade python3-sss-debuginfoUpgrade sssd-toolsUpgrade sssd-ipa-debuginfoUpgrade libsss_idmapUpgrade python3-libipa_hbacUpgrade sssd-proxyUpgrade sssd-clientUpgrade sssd-nfs-idmap-debuginfoUpgrade sssd-proxy-debuginfoUpgrade sssd-ad-debuginfoUpgrade libsss_autofsUpgrade python3-libsss_nss_idmap-debuginfoUpgrade sssd-nfs-idmap | May 5, 2022 | Dec 23, 2021 |
| Suse | — | Upgrade libsss_nss_idmap0Upgrade sssd-proxyUpgrade libsss_idmap-develUpgrade python3-ipa_hbacUpgrade sssd-ipaUpgrade sssdUpgrade python-sssd-configUpgrade sssd-winbind-idmapUpgrade libsss_simpleifp0Upgrade sssd-wbclientUpgrade python3-sssd-configUpgrade libipa_hbac0Upgrade sssd-adUpgrade sssd-toolsUpgrade sssd-32bitUpgrade sssd-ldapUpgrade sssd-common-32bitUpgrade sssd-commonUpgrade libsss_certmap-develUpgrade libsss_nss_idmap-develUpgrade sssd-wbclient-develUpgrade sssd-krb5-commonUpgrade sssd-krb5Upgrade libnfsidmap-sssUpgrade libipa_hbac-develUpgrade sssd-dbusUpgrade sssd-kcmUpgrade python3-sss_nss_idmapUpgrade libsss_certmap0Upgrade libsss_simpleifp-develUpgrade libsss_idmap0Upgrade python3-sss-murmur | Aug 31, 2021 | Aug 17, 2021 |
| Ubuntu | — | Upgrade sssd | Sep 9, 2021 | Aug 17, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub