sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libsss_certmap-develUpgrade sssd-commonUpgrade sssd-libwbclient-develUpgrade sssd-common-pacUpgrade sssd-dbusUpgrade libsss_certmapUpgrade sssd-debuginfoUpgrade sssd-libwbclientUpgrade libsss_nss_idmapUpgrade libsss_autofsUpgrade sssd-clientUpgrade sssd-toolsUpgrade libipa_hbac-develUpgrade sssd-krb5Upgrade libsss_nss_idmap-develUpgrade sssd-ldapUpgrade sssdUpgrade libsss_idmap-develUpgrade python-sss-murmurUpgrade libsss_simpleifpUpgrade libsss_sudoUpgrade sssd-ipaUpgrade python-libsss_nss_idmapUpgrade sssd-polkit-rulesUpgrade python-sssdconfigUpgrade libsss_simpleifp-develUpgrade libsss_idmapUpgrade python-libipa_hbacUpgrade python-sssUpgrade sssd-proxyUpgrade sssd-kcmUpgrade libipa_hbacUpgrade sssd-winbind-idmapUpgrade sssd-adUpgrade sssd-krb5-common | Mar 22, 2023 | Feb 1, 2023 |
| Amazon_linux | — | Upgrade sssd | Apr 6, 2023 | Jan 24, 2023 |
| Centos_linux | — | Upgrade sssd-ldapUpgrade sssd-common-pacUpgrade sssd-krb5Upgrade sssd-proxyUpgrade sssd-libwbclient-develUpgrade sssd-toolsUpgrade sssdUpgrade sssd-clientUpgrade libsss_autofsUpgrade libsss_certmapUpgrade libsss_idmapUpgrade sssd-polkit-rulesUpgrade sssd-commonUpgrade sssd-debuginfoUpgrade sssd-adUpgrade libsss_idmap-develUpgrade sssd-winbind-idmapUpgrade sssd-kcmUpgrade libsss_certmap-develUpgrade python-sss-murmurUpgrade python-libsss_nss_idmapUpgrade libsss_nss_idmap-develUpgrade sssd-krb5-commonUpgrade python-libipa_hbacUpgrade libsss_sudoUpgrade sssd-ipaUpgrade sssd-libwbclientUpgrade python-sssUpgrade libsss_simpleifp-develUpgrade libipa_hbac-develUpgrade libipa_hbacUpgrade sssd-dbusUpgrade python-sssdconfigUpgrade libsss_nss_idmapUpgrade libsss_simpleifp | Jan 27, 2023 | Jan 24, 2023 |
| Debian | — | Upgrade sssd | May 31, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade sssdUpgrade python3-sssd | May 18, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsss_idmapUpgrade libsss_autofsUpgrade libsss_nss_idmapUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade sssd-commonUpgrade sssd-libwbclientUpgrade sssd-krb5Upgrade libsss_certmapUpgrade sssd-clientUpgrade sssd-toolsUpgrade sssd-proxyUpgrade sssd-dbusUpgrade python-sssdconfigUpgrade sssd-ipaUpgrade sssd-krb5-commonUpgrade sssd-adUpgrade libsss_sudoUpgrade python-sss-murmurUpgrade python-libsss_nss_idmapUpgrade python-libipa_hbacUpgrade libsss_simpleifpUpgrade sssdUpgrade libipa_hbacUpgrade python-sss | Jun 9, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssd-kcmUpgrade libsss_sudoUpgrade libsss_idmapUpgrade python3-sssdconfigUpgrade sssd-winbind-idmapUpgrade sssd-common-pacUpgrade sssd-dbusUpgrade python2-libsss_nss_idmapUpgrade sssd-commonUpgrade libipa_hbacUpgrade sssd-libwbclientUpgrade python2-sssUpgrade sssd-toolsUpgrade sssd-clientUpgrade sssd-ipaUpgrade python3-sss-murmurUpgrade libsss_nss_idmapUpgrade python2-libipa_hbacUpgrade python2-sssdconfigUpgrade sssd-proxyUpgrade sssd-ldapUpgrade sssd-adUpgrade python3-sssUpgrade python3-libipa_hbacUpgrade libsss_autofsUpgrade sssd-krb5-commonUpgrade libsss_simpleifpUpgrade sssdUpgrade sssd-nfs-idmapUpgrade sssd-krb5Upgrade python3-libsss_nss_idmapUpgrade python2-sss-murmurUpgrade libsss_certmap | Apr 13, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-sssdUpgrade sssd | May 10, 2023 | Feb 1, 2023 |
| Oracle_linux | — | Upgrade python-libipa_hbacUpgrade libsss_simpleifpUpgrade sssdUpgrade sssd-winbind-idmapUpgrade libsss_nss_idmapUpgrade libsss_idmapUpgrade libsss_idmap-develUpgrade libsss_sudoUpgrade sssd-libwbclient-develUpgrade libsss_autofsUpgrade sssd-ipaUpgrade sssd-adUpgrade sssd-proxyUpgrade sssd-toolsUpgrade sssd-krb5-commonUpgrade libsss_certmapUpgrade python-sssdconfigUpgrade sssd-common-pacUpgrade sssd-commonUpgrade libipa_hbac-develUpgrade libsss_nss_idmap-develUpgrade libsss_certmap-develUpgrade sssd-kcmUpgrade python-sss-murmurUpgrade sssd-libwbclientUpgrade sssd-ldapUpgrade libipa_hbacUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifp-develUpgrade sssd-polkit-rulesUpgrade sssd-krb5Upgrade sssd-dbusUpgrade sssd-clientUpgrade python-sss | Jan 25, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade libsss_sudoUpgrade sssd-kcmUpgrade libipa_hbac-develUpgrade sssd-clientUpgrade libsss_autofsUpgrade sssd-dbusUpgrade libsss_simpleifp-develUpgrade libsss_idmapUpgrade python-libsss_nss_idmapUpgrade sssd-libwbclient-develUpgrade sssd-winbind-idmapUpgrade libsss_idmap-develUpgrade sssd-commonUpgrade python-libipa_hbacUpgrade sssd-common-pacUpgrade python-sss-murmurUpgrade sssd-ipaUpgrade sssd-toolsUpgrade sssd-ldapUpgrade sssd-krb5-commonUpgrade sssd-libwbclientUpgrade libsss_nss_idmap-develUpgrade sssd-krb5Upgrade sssdUpgrade libipa_hbacUpgrade sssd-proxyUpgrade libsss_certmap-develUpgrade sssd-adUpgrade sssd-polkit-rulesUpgrade python-sssUpgrade python-sssdconfigUpgrade libsss_simpleifpUpgrade libsss_certmapUpgrade libsss_nss_idmapUpgrade sssd-debuginfo | Jan 27, 2023 | Jan 24, 2023 |
| Suse | — | Upgrade libsss_simpleifp-develUpgrade libsss_idmap0Upgrade sssd-ldapUpgrade sssd-wbclient-develUpgrade sssd-krb5Upgrade libsss_certmap0Upgrade libipa_hbac-develUpgrade sssd-dbusUpgrade libsss_nss_idmap-develUpgrade sssd-commonUpgrade libsss_certmap-develUpgrade libsss_idmap-develUpgrade python-sssd-configUpgrade libsss_simpleifp0Upgrade libipa_hbac0Upgrade sssd-wbclientUpgrade sssd-krb5-commonUpgrade sssd-adUpgrade sssd-32bitUpgrade sssdUpgrade sssd-toolsUpgrade sssd-common-32bitUpgrade python3-sssd-configUpgrade libsss_nss_idmap0Upgrade sssd-proxyUpgrade sssd-ipaUpgrade sssd-winbind-idmap | Jan 30, 2023 | Jan 27, 2023 |
| Ubuntu | — | Upgrade sssd | Jun 13, 2023 | Feb 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub