sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-ldapUpgrade python-sssdconfigUpgrade sssdUpgrade python-sss-murmurUpgrade sssd-adUpgrade sssd-kcmUpgrade libsss_simpleifp-develUpgrade libsss_idmapUpgrade sssd-proxyUpgrade libipa_hbacUpgrade libsss_idmap-develUpgrade python-libsss_nss_idmapUpgrade sssd-krb5-commonUpgrade python-libipa_hbacUpgrade sssd-ipaUpgrade libsss_simpleifpUpgrade libsss_sudoUpgrade sssd-polkit-rulesUpgrade sssd-winbind-idmapUpgrade python-sssUpgrade libipa_hbac-develUpgrade sssd-dbusUpgrade sssd-common-pacUpgrade sssd-debuginfoUpgrade sssd-commonUpgrade libsss_certmapUpgrade libsss_certmap-develUpgrade sssd-clientUpgrade sssd-krb5Upgrade libsss_autofsUpgrade sssd-libwbclient-develUpgrade libsss_nss_idmapUpgrade sssd-libwbclientUpgrade libsss_nss_idmap-develUpgrade sssd-tools | Mar 22, 2023 | Feb 1, 2023 |
| Amazon_linux | — | Upgrade sssd | Apr 6, 2023 | Jan 24, 2023 |
| Centos_linux | — | Upgrade sssd-ldapUpgrade sssd-clientUpgrade sssd-libwbclient-develUpgrade sssdUpgrade sssd-common-pacUpgrade libsss_certmapUpgrade sssd-proxyUpgrade libsss_idmapUpgrade sssd-toolsUpgrade libsss_autofsUpgrade sssd-krb5Upgrade libsss_sudoUpgrade sssd-ipaUpgrade sssd-debuginfoUpgrade sssd-polkit-rulesUpgrade sssd-commonUpgrade sssd-krb5-commonUpgrade libsss_nss_idmap-develUpgrade libsss_simpleifpUpgrade sssd-adUpgrade python-libipa_hbacUpgrade sssd-winbind-idmapUpgrade libsss_idmap-develUpgrade python-sss-murmurUpgrade libsss_certmap-develUpgrade sssd-kcmUpgrade sssd-libwbclientUpgrade python-sssUpgrade libsss_simpleifp-develUpgrade libipa_hbac-develUpgrade libipa_hbacUpgrade python-libsss_nss_idmapUpgrade sssd-dbusUpgrade python-sssdconfigUpgrade libsss_nss_idmap | Jan 27, 2023 | Jan 24, 2023 |
| Debian | — | Upgrade sssd | May 31, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-sssdUpgrade sssd | May 18, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sssd-clientUpgrade libsss_nss_idmapUpgrade sssd-dbusUpgrade sssd-krb5Upgrade sssd-toolsUpgrade libsss_autofsUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade sssd-libwbclientUpgrade sssd-proxyUpgrade libsss_idmapUpgrade libsss_certmapUpgrade sssd-commonUpgrade sssd-ipaUpgrade sssdUpgrade python-sssUpgrade sssd-adUpgrade libipa_hbacUpgrade python-sssdconfigUpgrade libsss_sudoUpgrade sssd-krb5-commonUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifpUpgrade python-sss-murmurUpgrade python-libipa_hbac | Jun 9, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssd-ipaUpgrade libipa_hbacUpgrade sssd-clientUpgrade sssd-commonUpgrade libsss_nss_idmapUpgrade libsss_sudoUpgrade sssd-kcmUpgrade python3-sssdconfigUpgrade libsss_idmapUpgrade python3-sss-murmurUpgrade sssd-winbind-idmapUpgrade python2-sssUpgrade sssd-libwbclientUpgrade python2-libsss_nss_idmapUpgrade sssd-toolsUpgrade sssd-common-pacUpgrade sssd-dbusUpgrade python3-libipa_hbacUpgrade sssd-nfs-idmapUpgrade sssd-adUpgrade python2-sssdconfigUpgrade sssd-proxyUpgrade python2-sss-murmurUpgrade libsss_certmapUpgrade python3-sssUpgrade sssdUpgrade sssd-krb5-commonUpgrade python2-libipa_hbacUpgrade sssd-ldapUpgrade sssd-krb5Upgrade python3-libsss_nss_idmapUpgrade libsss_autofsUpgrade libsss_simpleifp | Apr 13, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sssdUpgrade python3-sssd | May 10, 2023 | Feb 1, 2023 |
| Oracle_linux | — | Upgrade sssdUpgrade sssd-winbind-idmapUpgrade libsss_simpleifpUpgrade libsss_nss_idmapUpgrade python-libipa_hbacUpgrade sssd-toolsUpgrade libsss_autofsUpgrade sssd-ipaUpgrade libsss_idmap-develUpgrade sssd-adUpgrade sssd-proxyUpgrade libsss_idmapUpgrade sssd-libwbclient-develUpgrade libsss_sudoUpgrade libipa_hbacUpgrade python-libsss_nss_idmapUpgrade python-sssUpgrade libsss_nss_idmap-develUpgrade libsss_certmap-develUpgrade python-sssdconfigUpgrade sssd-libwbclientUpgrade sssd-ldapUpgrade libsss_simpleifp-develUpgrade sssd-commonUpgrade python-sss-murmurUpgrade libipa_hbac-develUpgrade sssd-krb5-commonUpgrade sssd-common-pacUpgrade libsss_certmapUpgrade sssd-krb5Upgrade sssd-polkit-rulesUpgrade sssd-dbusUpgrade sssd-clientUpgrade sssd-kcm | Jan 25, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade libsss_sudoUpgrade sssd-common-pacUpgrade libsss_nss_idmap-develUpgrade sssd-ipaUpgrade sssd-clientUpgrade libsss_idmapUpgrade libsss_autofsUpgrade sssd-libwbclientUpgrade sssd-krb5-commonUpgrade sssd-dbusUpgrade python-libsss_nss_idmapUpgrade sssd-commonUpgrade sssd-kcmUpgrade libsss_simpleifp-develUpgrade sssd-ldapUpgrade python-libipa_hbacUpgrade python-sss-murmurUpgrade sssd-winbind-idmapUpgrade libsss_idmap-develUpgrade libipa_hbac-develUpgrade sssd-toolsUpgrade sssd-libwbclient-develUpgrade sssdUpgrade sssd-krb5Upgrade libipa_hbacUpgrade libsss_nss_idmapUpgrade python-sssUpgrade sssd-proxyUpgrade sssd-adUpgrade python-sssdconfigUpgrade sssd-debuginfoUpgrade libsss_certmapUpgrade libsss_simpleifpUpgrade libsss_certmap-develUpgrade sssd-polkit-rules | Jan 27, 2023 | Jan 24, 2023 |
| Suse | — | Upgrade libsss_certmap-develUpgrade sssd-commonUpgrade libipa_hbac-develUpgrade sssd-krb5Upgrade sssd-dbusUpgrade libsss_nss_idmap-develUpgrade libsss_certmap0Upgrade libsss_simpleifp-develUpgrade libsss_idmap0Upgrade sssd-ldapUpgrade sssd-wbclient-develUpgrade sssd-wbclientUpgrade sssd-32bitUpgrade sssd-toolsUpgrade sssd-common-32bitUpgrade sssd-krb5-commonUpgrade libsss_nss_idmap0Upgrade libsss_idmap-develUpgrade sssd-proxyUpgrade sssd-ipaUpgrade python-sssd-configUpgrade libsss_simpleifp0Upgrade libipa_hbac0Upgrade sssd-winbind-idmapUpgrade sssd-adUpgrade sssdUpgrade python3-sssd-config | Jan 30, 2023 | Jan 27, 2023 |
| Ubuntu | — | Upgrade sssd | Jun 13, 2023 | Feb 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub