sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-dbusUpgrade sssd-libwbclientUpgrade libipa_hbac-develUpgrade sssd-common-pacUpgrade libsss_autofsUpgrade sssd-commonUpgrade sssd-debuginfoUpgrade libsss_certmapUpgrade sssd-libwbclient-develUpgrade libsss_nss_idmap-develUpgrade libsss_certmap-develUpgrade sssd-clientUpgrade sssd-toolsUpgrade sssd-krb5Upgrade libsss_nss_idmapUpgrade libsss_simpleifpUpgrade sssd-ldapUpgrade libipa_hbacUpgrade sssd-adUpgrade python-sssUpgrade libsss_idmap-develUpgrade python-libipa_hbacUpgrade sssd-kcmUpgrade sssd-winbind-idmapUpgrade sssd-krb5-commonUpgrade sssd-proxyUpgrade sssd-ipaUpgrade python-sssdconfigUpgrade python-libsss_nss_idmapUpgrade libsss_idmapUpgrade libsss_sudoUpgrade sssd-polkit-rulesUpgrade libsss_simpleifp-develUpgrade sssdUpgrade python-sss-murmur | Mar 22, 2023 | Feb 1, 2023 |
| Amazon_linux | — | Upgrade sssd | Apr 6, 2023 | Jan 24, 2023 |
| Centos_linux | — | Upgrade sssd-libwbclient-develUpgrade sssd-ldapUpgrade sssdUpgrade libsss_certmapUpgrade sssd-common-pacUpgrade sssd-toolsUpgrade libsss_autofsUpgrade sssd-clientUpgrade libsss_idmapUpgrade sssd-proxyUpgrade sssd-krb5Upgrade sssd-dbusUpgrade sssd-ipaUpgrade libsss_nss_idmap-develUpgrade sssd-krb5-commonUpgrade libsss_certmap-develUpgrade sssd-kcmUpgrade libsss_nss_idmapUpgrade python-sssdconfigUpgrade libsss_simpleifpUpgrade sssd-commonUpgrade python-libsss_nss_idmapUpgrade sssd-debuginfoUpgrade python-sss-murmurUpgrade libsss_sudoUpgrade sssd-winbind-idmapUpgrade sssd-adUpgrade libsss_idmap-develUpgrade python-libipa_hbacUpgrade sssd-polkit-rulesUpgrade sssd-libwbclientUpgrade python-sssUpgrade libsss_simpleifp-develUpgrade libipa_hbac-develUpgrade libipa_hbac | Jan 27, 2023 | Jan 24, 2023 |
| Debian | — | Upgrade sssd | May 31, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-sssdUpgrade sssd | May 18, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libipa_hbacUpgrade sssdUpgrade sssd-krb5-commonUpgrade sssd-ipaUpgrade python-libipa_hbacUpgrade python-libsss_nss_idmapUpgrade sssd-adUpgrade python-sss-murmurUpgrade libsss_sudoUpgrade libsss_simpleifpUpgrade python-sssUpgrade python-sssdconfigUpgrade libsss_nss_idmapUpgrade sssd-krb5Upgrade libsss_idmapUpgrade libsss_certmapUpgrade sssd-commonUpgrade sssd-clientUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade sssd-ldapUpgrade sssd-common-pacUpgrade libsss_autofsUpgrade sssd-proxyUpgrade sssd-dbus | Jun 9, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libsss_idmapUpgrade sssd-kcmUpgrade python3-sss-murmurUpgrade sssd-common-pacUpgrade sssd-dbusUpgrade libsss_sudoUpgrade sssd-toolsUpgrade sssd-winbind-idmapUpgrade libsss_nss_idmapUpgrade libipa_hbacUpgrade python2-sssUpgrade sssd-libwbclientUpgrade sssd-clientUpgrade sssd-commonUpgrade python2-libsss_nss_idmapUpgrade sssd-ipaUpgrade python3-sssdconfigUpgrade python3-libipa_hbacUpgrade sssd-krb5-commonUpgrade python3-sssUpgrade sssd-nfs-idmapUpgrade sssd-adUpgrade python2-sssdconfigUpgrade sssd-proxyUpgrade libsss_certmapUpgrade python2-sss-murmurUpgrade libsss_simpleifpUpgrade libsss_autofsUpgrade sssd-ldapUpgrade sssd-krb5Upgrade python3-libsss_nss_idmapUpgrade sssdUpgrade python2-libipa_hbac | Apr 13, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-sssdUpgrade sssd | May 10, 2023 | Feb 1, 2023 |
| Oracle_linux | — | Upgrade libsss_sudoUpgrade libsss_simpleifpUpgrade sssd-ipaUpgrade sssd-libwbclient-develUpgrade sssd-proxyUpgrade sssd-toolsUpgrade sssd-adUpgrade libsss_autofsUpgrade sssd-winbind-idmapUpgrade libsss_idmap-develUpgrade libsss_idmapUpgrade python-libipa_hbacUpgrade libsss_nss_idmapUpgrade sssdUpgrade sssd-polkit-rulesUpgrade sssd-kcmUpgrade libsss_certmapUpgrade python-sssdconfigUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifp-develUpgrade sssd-dbusUpgrade libipa_hbacUpgrade sssd-krb5Upgrade python-sssUpgrade libsss_certmap-develUpgrade libsss_nss_idmap-develUpgrade libipa_hbac-develUpgrade sssd-krb5-commonUpgrade sssd-common-pacUpgrade sssd-commonUpgrade python-sss-murmurUpgrade sssd-libwbclientUpgrade sssd-ldapUpgrade sssd-client | Jan 25, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade sssd-kcmUpgrade sssd-dbusUpgrade python-sss-murmurUpgrade libsss_sudoUpgrade libsss_nss_idmap-develUpgrade python-libsss_nss_idmapUpgrade sssd-krb5-commonUpgrade libsss_idmap-develUpgrade python-libipa_hbacUpgrade libipa_hbac-develUpgrade sssd-libwbclient-develUpgrade sssd-clientUpgrade sssd-libwbclientUpgrade sssd-ipaUpgrade sssd-ldapUpgrade sssd-toolsUpgrade sssd-common-pacUpgrade sssd-commonUpgrade libsss_idmapUpgrade libsss_simpleifp-develUpgrade sssd-winbind-idmapUpgrade libsss_autofsUpgrade python-sssdconfigUpgrade libsss_certmap-develUpgrade python-sssUpgrade sssdUpgrade sssd-krb5Upgrade libipa_hbacUpgrade sssd-polkit-rulesUpgrade sssd-adUpgrade sssd-proxyUpgrade libsss_simpleifpUpgrade libsss_certmapUpgrade libsss_nss_idmapUpgrade sssd-debuginfo | Jan 27, 2023 | Jan 24, 2023 |
| Suse | — | Upgrade sssd-common-32bitUpgrade sssd-toolsUpgrade sssdUpgrade libsss_nss_idmap0Upgrade sssd-adUpgrade python3-sssd-configUpgrade libsss_idmap-develUpgrade sssd-wbclientUpgrade sssd-winbind-idmapUpgrade libipa_hbac0Upgrade sssd-proxyUpgrade sssd-krb5-commonUpgrade python-sssd-configUpgrade sssd-ipaUpgrade libsss_simpleifp0Upgrade sssd-32bitUpgrade libipa_hbac-develUpgrade sssd-dbusUpgrade sssd-krb5Upgrade sssd-wbclient-develUpgrade sssd-commonUpgrade libsss_certmap-develUpgrade libsss_nss_idmap-develUpgrade libsss_certmap0Upgrade libsss_simpleifp-develUpgrade libsss_idmap0Upgrade sssd-ldap | Jan 30, 2023 | Jan 27, 2023 |
| Ubuntu | — | Upgrade sssd | Jun 13, 2023 | Feb 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub