sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-clientUpgrade libsss_certmap-develUpgrade libsss_certmapUpgrade libsss_autofsUpgrade sssd-libwbclient-develUpgrade sssd-commonUpgrade libsss_nss_idmapUpgrade sssd-debuginfoUpgrade sssd-toolsUpgrade sssd-common-pacUpgrade libipa_hbac-develUpgrade sssd-krb5Upgrade libsss_nss_idmap-develUpgrade sssd-libwbclientUpgrade sssd-dbusUpgrade sssd-winbind-idmapUpgrade sssd-krb5-commonUpgrade libsss_idmap-develUpgrade libsss_idmapUpgrade python-sssdconfigUpgrade sssd-ldapUpgrade sssd-ipaUpgrade python-sss-murmurUpgrade sssdUpgrade python-sssUpgrade sssd-kcmUpgrade libsss_sudoUpgrade libipa_hbacUpgrade libsss_simpleifp-develUpgrade sssd-polkit-rulesUpgrade python-libipa_hbacUpgrade sssd-adUpgrade sssd-proxyUpgrade libsss_simpleifpUpgrade python-libsss_nss_idmap | Mar 22, 2023 | Feb 1, 2023 |
| Amazon_linux | — | Upgrade sssd | Apr 6, 2023 | Jan 24, 2023 |
| Centos_linux | — | Upgrade sssd-winbind-idmapUpgrade libsss_idmap-develUpgrade sssd-adUpgrade libsss_simpleifpUpgrade sssd-commonUpgrade python-libipa_hbacUpgrade sssd-dbusUpgrade sssd-debuginfoUpgrade sssd-krb5-commonUpgrade sssd-ipaUpgrade libsss_nss_idmap-develUpgrade python-libsss_nss_idmapUpgrade libsss_sudoUpgrade libipa_hbac-develUpgrade libsss_simpleifp-develUpgrade libipa_hbacUpgrade python-sssUpgrade libsss_nss_idmapUpgrade libsss_certmap-develUpgrade sssd-kcmUpgrade sssd-libwbclientUpgrade python-sssdconfigUpgrade python-sss-murmurUpgrade sssd-polkit-rulesUpgrade sssd-proxyUpgrade sssd-toolsUpgrade sssd-common-pacUpgrade libsss_idmapUpgrade libsss_autofsUpgrade sssd-libwbclient-develUpgrade sssd-krb5Upgrade sssd-clientUpgrade sssd-ldapUpgrade sssdUpgrade libsss_certmap | Jan 27, 2023 | Jan 24, 2023 |
| Debian | — | Upgrade sssd | May 31, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade sssdUpgrade python3-sssd | May 18, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsss_nss_idmapUpgrade libsss_autofsUpgrade sssd-dbusUpgrade sssd-krb5Upgrade sssd-common-pacUpgrade sssd-ldapUpgrade sssd-commonUpgrade sssd-libwbclientUpgrade sssd-proxyUpgrade sssd-clientUpgrade sssd-toolsUpgrade libsss_idmapUpgrade libsss_certmapUpgrade sssdUpgrade libipa_hbacUpgrade python-libsss_nss_idmapUpgrade sssd-adUpgrade sssd-krb5-commonUpgrade python-libipa_hbacUpgrade python-sssdconfigUpgrade python-sssUpgrade python-sss-murmurUpgrade libsss_simpleifpUpgrade sssd-ipaUpgrade libsss_sudo | Jun 9, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-libsss_nss_idmapUpgrade sssd-dbusUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade sssd-ipaUpgrade sssd-winbind-idmapUpgrade python3-sssdconfigUpgrade python3-sss-murmurUpgrade libsss_sudoUpgrade sssd-common-pacUpgrade libipa_hbacUpgrade libsss_nss_idmapUpgrade sssd-clientUpgrade sssd-commonUpgrade python2-sssUpgrade libsss_idmapUpgrade sssd-kcmUpgrade python2-libipa_hbacUpgrade sssd-adUpgrade python2-sssdconfigUpgrade sssd-proxyUpgrade python2-sss-murmurUpgrade libsss_certmapUpgrade libsss_autofsUpgrade sssd-krb5-commonUpgrade sssd-krb5Upgrade python3-libsss_nss_idmapUpgrade python3-sssUpgrade python3-libipa_hbacUpgrade sssd-ldapUpgrade sssdUpgrade sssd-nfs-idmapUpgrade libsss_simpleifp | Apr 13, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-sssdUpgrade sssd | May 10, 2023 | Feb 1, 2023 |
| Oracle_linux | — | Upgrade libsss_simpleifpUpgrade sssd-adUpgrade sssd-proxyUpgrade libsss_sudoUpgrade sssd-libwbclient-develUpgrade libsss_idmapUpgrade python-libipa_hbacUpgrade sssd-ipaUpgrade libsss_nss_idmapUpgrade sssdUpgrade sssd-winbind-idmapUpgrade libsss_autofsUpgrade libsss_idmap-develUpgrade sssd-toolsUpgrade sssd-ldapUpgrade python-sss-murmurUpgrade sssd-krb5-commonUpgrade sssd-common-pacUpgrade sssd-commonUpgrade libipa_hbac-develUpgrade sssd-libwbclientUpgrade sssd-kcmUpgrade libsss_certmapUpgrade python-sssUpgrade libsss_certmap-develUpgrade libsss_nss_idmap-develUpgrade sssd-dbusUpgrade sssd-clientUpgrade sssd-polkit-rulesUpgrade sssd-krb5Upgrade libipa_hbacUpgrade python-sssdconfigUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifp-devel | Jan 25, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade python-sss-murmurUpgrade sssd-ipaUpgrade sssd-common-pacUpgrade sssd-libwbclient-develUpgrade libipa_hbac-develUpgrade sssd-kcmUpgrade sssd-libwbclientUpgrade sssd-dbusUpgrade libsss_sudoUpgrade libsss_autofsUpgrade sssd-clientUpgrade libsss_simpleifp-develUpgrade sssd-winbind-idmapUpgrade sssd-krb5-commonUpgrade sssd-commonUpgrade libsss_idmap-develUpgrade libsss_nss_idmap-develUpgrade libsss_idmapUpgrade sssd-toolsUpgrade sssd-ldapUpgrade python-libipa_hbacUpgrade python-libsss_nss_idmapUpgrade libsss_certmap-develUpgrade python-sssUpgrade sssd-debuginfoUpgrade libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssd-polkit-rulesUpgrade sssd-proxyUpgrade libsss_certmapUpgrade libsss_simpleifpUpgrade sssd-adUpgrade libipa_hbacUpgrade sssdUpgrade sssd-krb5 | Jan 27, 2023 | Jan 24, 2023 |
| Suse | — | Upgrade libsss_idmap0Upgrade sssd-krb5Upgrade libipa_hbac-develUpgrade sssd-dbusUpgrade libsss_nss_idmap-develUpgrade libsss_certmap-develUpgrade libsss_certmap0Upgrade sssd-wbclient-develUpgrade sssd-ldapUpgrade sssd-commonUpgrade libsss_simpleifp-develUpgrade sssd-krb5-commonUpgrade libsss_nss_idmap0Upgrade libsss_simpleifp0Upgrade libipa_hbac0Upgrade sssd-winbind-idmapUpgrade python3-sssd-configUpgrade sssd-wbclientUpgrade libsss_idmap-develUpgrade sssd-adUpgrade sssd-common-32bitUpgrade sssd-32bitUpgrade sssdUpgrade sssd-toolsUpgrade sssd-proxyUpgrade sssd-ipaUpgrade python-sssd-config | Jan 30, 2023 | Jan 27, 2023 |
| Ubuntu | — | Upgrade sssd | Jun 13, 2023 | Feb 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub