sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-krb5Upgrade libsss_certmap-develUpgrade libsss_nss_idmapUpgrade libsss_certmapUpgrade sssd-common-pacUpgrade sssd-libwbclient-develUpgrade libsss_nss_idmap-develUpgrade sssd-dbusUpgrade sssd-libwbclientUpgrade sssd-clientUpgrade sssd-toolsUpgrade libipa_hbac-develUpgrade libsss_autofsUpgrade sssd-commonUpgrade sssd-debuginfoUpgrade sssd-winbind-idmapUpgrade sssd-ldapUpgrade python-sssUpgrade python-sss-murmurUpgrade sssdUpgrade python-libsss_nss_idmapUpgrade libsss_sudoUpgrade sssd-adUpgrade sssd-krb5-commonUpgrade python-sssdconfigUpgrade sssd-proxyUpgrade sssd-kcmUpgrade sssd-ipaUpgrade python-libipa_hbacUpgrade libsss_simpleifpUpgrade sssd-polkit-rulesUpgrade libsss_idmap-develUpgrade libipa_hbacUpgrade libsss_simpleifp-develUpgrade libsss_idmap | Mar 22, 2023 | Feb 1, 2023 |
| Amazon_linux | — | Upgrade sssd | Apr 6, 2023 | Jan 24, 2023 |
| Centos_linux | — | Upgrade sssd-krb5Upgrade sssd-ldapUpgrade libsss_certmapUpgrade sssdUpgrade libsss_autofsUpgrade sssd-clientUpgrade libsss_idmapUpgrade sssd-proxyUpgrade sssd-libwbclient-develUpgrade sssd-common-pacUpgrade sssd-toolsUpgrade libsss_nss_idmap-develUpgrade sssd-libwbclientUpgrade python-sssUpgrade libsss_simpleifp-develUpgrade libipa_hbac-develUpgrade libipa_hbacUpgrade libsss_certmap-develUpgrade sssd-kcmUpgrade libsss_sudoUpgrade libsss_simpleifpUpgrade sssd-commonUpgrade sssd-debuginfoUpgrade sssd-ipaUpgrade sssd-krb5-commonUpgrade python-libsss_nss_idmapUpgrade python-sss-murmurUpgrade sssd-adUpgrade sssd-winbind-idmapUpgrade python-libipa_hbacUpgrade libsss_idmap-develUpgrade libsss_nss_idmapUpgrade python-sssdconfigUpgrade sssd-dbusUpgrade sssd-polkit-rules | Jan 27, 2023 | Jan 24, 2023 |
| Debian | — | Upgrade sssd | May 31, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-sssdUpgrade sssd | May 18, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsss_simpleifpUpgrade python-libsss_nss_idmapUpgrade python-libipa_hbacUpgrade sssd-adUpgrade python-sss-murmurUpgrade sssdUpgrade sssd-ipaUpgrade libipa_hbacUpgrade python-sssUpgrade libsss_sudoUpgrade python-sssdconfigUpgrade sssd-krb5-commonUpgrade libsss_nss_idmapUpgrade sssd-clientUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade sssd-common-pacUpgrade sssd-commonUpgrade sssd-ldapUpgrade libsss_certmapUpgrade libsss_idmapUpgrade libsss_autofsUpgrade sssd-proxyUpgrade sssd-krb5Upgrade sssd-dbus | Jun 9, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssd-nfs-idmapUpgrade sssdUpgrade libsss_simpleifpUpgrade python3-libipa_hbacUpgrade python2-sss-murmurUpgrade python2-sssdconfigUpgrade sssd-adUpgrade python3-sssUpgrade libsss_certmapUpgrade sssd-proxyUpgrade python2-libipa_hbacUpgrade python3-libsss_nss_idmapUpgrade sssd-krb5Upgrade sssd-ldapUpgrade libsss_autofsUpgrade sssd-krb5-commonUpgrade libsss_sudoUpgrade python3-sssdconfigUpgrade sssd-dbusUpgrade python3-sss-murmurUpgrade sssd-winbind-idmapUpgrade python2-libsss_nss_idmapUpgrade sssd-ipaUpgrade sssd-kcmUpgrade libsss_idmapUpgrade libsss_nss_idmapUpgrade sssd-toolsUpgrade python2-sssUpgrade libipa_hbacUpgrade sssd-commonUpgrade sssd-clientUpgrade sssd-libwbclientUpgrade sssd-common-pac | Apr 13, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-sssdUpgrade sssd | May 10, 2023 | Feb 1, 2023 |
| Oracle_linux | — | Upgrade sssd-commonUpgrade sssd-krb5-commonUpgrade python-sss-murmurUpgrade sssd-common-pacUpgrade sssd-ldapUpgrade sssd-libwbclientUpgrade libipa_hbac-develUpgrade sssd-clientUpgrade sssd-krb5Upgrade python-sssdconfigUpgrade libsss_certmapUpgrade sssd-kcmUpgrade python-sssUpgrade sssd-polkit-rulesUpgrade libsss_certmap-develUpgrade sssd-dbusUpgrade libsss_nss_idmap-develUpgrade libipa_hbacUpgrade python-libsss_nss_idmapUpgrade libsss_simpleifp-develUpgrade python-libipa_hbacUpgrade sssd-winbind-idmapUpgrade sssd-ipaUpgrade libsss_idmapUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade sssdUpgrade sssd-toolsUpgrade sssd-proxyUpgrade sssd-adUpgrade libsss_idmap-develUpgrade libsss_autofsUpgrade libsss_simpleifpUpgrade sssd-libwbclient-devel | Jan 25, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade sssd-ldapUpgrade sssd-commonUpgrade sssd-winbind-idmapUpgrade libsss_idmap-develUpgrade libsss_idmapUpgrade sssd-dbusUpgrade sssd-toolsUpgrade sssd-libwbclient-develUpgrade libsss_autofsUpgrade libsss_simpleifp-develUpgrade sssd-clientUpgrade python-libsss_nss_idmapUpgrade sssd-ipaUpgrade libipa_hbac-develUpgrade libsss_sudoUpgrade python-libipa_hbacUpgrade libsss_nss_idmap-develUpgrade python-sss-murmurUpgrade sssd-common-pacUpgrade sssd-kcmUpgrade sssd-libwbclientUpgrade sssd-krb5-commonUpgrade libsss_simpleifpUpgrade sssd-proxyUpgrade sssd-adUpgrade libsss_nss_idmapUpgrade libsss_certmapUpgrade sssd-debuginfoUpgrade python-sssdconfigUpgrade libipa_hbacUpgrade sssdUpgrade sssd-krb5Upgrade python-sssUpgrade sssd-polkit-rulesUpgrade libsss_certmap-devel | Jan 27, 2023 | Jan 24, 2023 |
| Suse | — | Upgrade sssd-proxyUpgrade sssd-winbind-idmapUpgrade sssd-32bitUpgrade sssd-common-32bitUpgrade sssdUpgrade libsss_simpleifp0Upgrade python3-sssd-configUpgrade sssd-adUpgrade sssd-wbclientUpgrade python-sssd-configUpgrade libsss_nss_idmap0Upgrade libipa_hbac0Upgrade libsss_idmap-develUpgrade sssd-toolsUpgrade sssd-krb5-commonUpgrade sssd-ipaUpgrade sssd-dbusUpgrade libsss_certmap0Upgrade sssd-commonUpgrade libsss_simpleifp-develUpgrade libipa_hbac-develUpgrade sssd-krb5Upgrade libsss_nss_idmap-develUpgrade libsss_certmap-develUpgrade libsss_idmap0Upgrade sssd-wbclient-develUpgrade sssd-ldap | Jan 30, 2023 | Jan 27, 2023 |
| Ubuntu | — | Upgrade sssd | Jun 13, 2023 | Feb 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub