sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libipa_hbacamazon-linux-ami-2-upgrade-libipa_hbac-develamazon-linux-ami-2-upgrade-libsss_autofsamazon-linux-ami-2-upgrade-libsss_certmapamazon-linux-ami-2-upgrade-libsss_certmap-develamazon-linux-ami-2-upgrade-libsss_idmapamazon-linux-ami-2-upgrade-libsss_idmap-develamazon-linux-ami-2-upgrade-libsss_nss_idmapamazon-linux-ami-2-upgrade-libsss_nss_idmap-develamazon-linux-ami-2-upgrade-libsss_simpleifpamazon-linux-ami-2-upgrade-libsss_simpleifp-develamazon-linux-ami-2-upgrade-libsss_sudoamazon-linux-ami-2-upgrade-python-libipa_hbacamazon-linux-ami-2-upgrade-python-libsss_nss_idmapamazon-linux-ami-2-upgrade-python-sssamazon-linux-ami-2-upgrade-python-sss-murmuramazon-linux-ami-2-upgrade-python-sssdconfigamazon-linux-ami-2-upgrade-sssdamazon-linux-ami-2-upgrade-sssd-adamazon-linux-ami-2-upgrade-sssd-clientamazon-linux-ami-2-upgrade-sssd-commonamazon-linux-ami-2-upgrade-sssd-common-pacamazon-linux-ami-2-upgrade-sssd-dbusamazon-linux-ami-2-upgrade-sssd-debuginfoamazon-linux-ami-2-upgrade-sssd-ipaamazon-linux-ami-2-upgrade-sssd-kcmamazon-linux-ami-2-upgrade-sssd-krb5amazon-linux-ami-2-upgrade-sssd-krb5-commonamazon-linux-ami-2-upgrade-sssd-ldapamazon-linux-ami-2-upgrade-sssd-libwbclientamazon-linux-ami-2-upgrade-sssd-libwbclient-develamazon-linux-ami-2-upgrade-sssd-polkit-rulesamazon-linux-ami-2-upgrade-sssd-proxyamazon-linux-ami-2-upgrade-sssd-toolsamazon-linux-ami-2-upgrade-sssd-winbind-idmap | Mar 22, 2023 | Feb 1, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-sssd | Apr 6, 2023 | Jan 24, 2023 |
| Centos_linux | — | centos-upgrade-libipa_hbaccentos-upgrade-libipa_hbac-develcentos-upgrade-libsss_autofscentos-upgrade-libsss_certmapcentos-upgrade-libsss_certmap-develcentos-upgrade-libsss_idmapcentos-upgrade-libsss_idmap-develcentos-upgrade-libsss_nss_idmapcentos-upgrade-libsss_nss_idmap-develcentos-upgrade-libsss_simpleifpcentos-upgrade-libsss_simpleifp-develcentos-upgrade-libsss_sudocentos-upgrade-python-libipa_hbaccentos-upgrade-python-libsss_nss_idmapcentos-upgrade-python-ssscentos-upgrade-python-sss-murmurcentos-upgrade-python-sssdconfigcentos-upgrade-sssdcentos-upgrade-sssd-adcentos-upgrade-sssd-clientcentos-upgrade-sssd-commoncentos-upgrade-sssd-common-paccentos-upgrade-sssd-dbuscentos-upgrade-sssd-debuginfocentos-upgrade-sssd-ipacentos-upgrade-sssd-kcmcentos-upgrade-sssd-krb5centos-upgrade-sssd-krb5-commoncentos-upgrade-sssd-ldapcentos-upgrade-sssd-libwbclientcentos-upgrade-sssd-libwbclient-develcentos-upgrade-sssd-polkit-rulescentos-upgrade-sssd-proxycentos-upgrade-sssd-toolscentos-upgrade-sssd-winbind-idmap | Jan 27, 2023 | Jan 24, 2023 |
| Debian | debian-upgrade-sssd | May 31, 2023 | Feb 1, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-python3-sssdhuawei-euleros-2_0_sp10-upgrade-sssd | May 18, 2023 | Feb 1, 2023 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libipa_hbachuawei-euleros-2_0_sp5-upgrade-libsss_autofshuawei-euleros-2_0_sp5-upgrade-libsss_certmaphuawei-euleros-2_0_sp5-upgrade-libsss_idmaphuawei-euleros-2_0_sp5-upgrade-libsss_nss_idmaphuawei-euleros-2_0_sp5-upgrade-libsss_simpleifphuawei-euleros-2_0_sp5-upgrade-libsss_sudohuawei-euleros-2_0_sp5-upgrade-python-libipa_hbachuawei-euleros-2_0_sp5-upgrade-python-libsss_nss_idmaphuawei-euleros-2_0_sp5-upgrade-python-ssshuawei-euleros-2_0_sp5-upgrade-python-sss-murmurhuawei-euleros-2_0_sp5-upgrade-python-sssdconfighuawei-euleros-2_0_sp5-upgrade-sssdhuawei-euleros-2_0_sp5-upgrade-sssd-adhuawei-euleros-2_0_sp5-upgrade-sssd-clienthuawei-euleros-2_0_sp5-upgrade-sssd-commonhuawei-euleros-2_0_sp5-upgrade-sssd-common-pachuawei-euleros-2_0_sp5-upgrade-sssd-dbushuawei-euleros-2_0_sp5-upgrade-sssd-ipahuawei-euleros-2_0_sp5-upgrade-sssd-krb5huawei-euleros-2_0_sp5-upgrade-sssd-krb5-commonhuawei-euleros-2_0_sp5-upgrade-sssd-ldaphuawei-euleros-2_0_sp5-upgrade-sssd-libwbclienthuawei-euleros-2_0_sp5-upgrade-sssd-proxyhuawei-euleros-2_0_sp5-upgrade-sssd-tools | Jun 9, 2023 | Feb 1, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libipa_hbachuawei-euleros-2_0_sp8-upgrade-libsss_autofshuawei-euleros-2_0_sp8-upgrade-libsss_certmaphuawei-euleros-2_0_sp8-upgrade-libsss_idmaphuawei-euleros-2_0_sp8-upgrade-libsss_nss_idmaphuawei-euleros-2_0_sp8-upgrade-libsss_simpleifphuawei-euleros-2_0_sp8-upgrade-libsss_sudohuawei-euleros-2_0_sp8-upgrade-python2-libipa_hbachuawei-euleros-2_0_sp8-upgrade-python2-libsss_nss_idmaphuawei-euleros-2_0_sp8-upgrade-python2-ssshuawei-euleros-2_0_sp8-upgrade-python2-sss-murmurhuawei-euleros-2_0_sp8-upgrade-python2-sssdconfighuawei-euleros-2_0_sp8-upgrade-python3-libipa_hbachuawei-euleros-2_0_sp8-upgrade-python3-libsss_nss_idmaphuawei-euleros-2_0_sp8-upgrade-python3-ssshuawei-euleros-2_0_sp8-upgrade-python3-sss-murmurhuawei-euleros-2_0_sp8-upgrade-python3-sssdconfighuawei-euleros-2_0_sp8-upgrade-sssdhuawei-euleros-2_0_sp8-upgrade-sssd-adhuawei-euleros-2_0_sp8-upgrade-sssd-clienthuawei-euleros-2_0_sp8-upgrade-sssd-commonhuawei-euleros-2_0_sp8-upgrade-sssd-common-pachuawei-euleros-2_0_sp8-upgrade-sssd-dbushuawei-euleros-2_0_sp8-upgrade-sssd-ipahuawei-euleros-2_0_sp8-upgrade-sssd-kcmhuawei-euleros-2_0_sp8-upgrade-sssd-krb5huawei-euleros-2_0_sp8-upgrade-sssd-krb5-commonhuawei-euleros-2_0_sp8-upgrade-sssd-ldaphuawei-euleros-2_0_sp8-upgrade-sssd-libwbclienthuawei-euleros-2_0_sp8-upgrade-sssd-nfs-idmaphuawei-euleros-2_0_sp8-upgrade-sssd-proxyhuawei-euleros-2_0_sp8-upgrade-sssd-toolshuawei-euleros-2_0_sp8-upgrade-sssd-winbind-idmap | Apr 13, 2023 | Feb 1, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-python3-sssdhuawei-euleros-2_0_sp9-upgrade-sssd | May 10, 2023 | Feb 1, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-libipa-hbacoracle-linux-upgrade-libipa-hbac-develoracle-linux-upgrade-libsss-autofsoracle-linux-upgrade-libsss-certmaporacle-linux-upgrade-libsss-certmap-develoracle-linux-upgrade-libsss-idmaporacle-linux-upgrade-libsss-idmap-develoracle-linux-upgrade-libsss-nss-idmaporacle-linux-upgrade-libsss-nss-idmap-develoracle-linux-upgrade-libsss-simpleifporacle-linux-upgrade-libsss-simpleifp-develoracle-linux-upgrade-libsss-sudooracle-linux-upgrade-python-libipa-hbacoracle-linux-upgrade-python-libsss-nss-idmaporacle-linux-upgrade-python-sssoracle-linux-upgrade-python-sssdconfigoracle-linux-upgrade-python-sss-murmuroracle-linux-upgrade-sssdoracle-linux-upgrade-sssd-adoracle-linux-upgrade-sssd-clientoracle-linux-upgrade-sssd-commonoracle-linux-upgrade-sssd-common-pacoracle-linux-upgrade-sssd-dbusoracle-linux-upgrade-sssd-ipaoracle-linux-upgrade-sssd-kcmoracle-linux-upgrade-sssd-krb5oracle-linux-upgrade-sssd-krb5-commonoracle-linux-upgrade-sssd-ldaporacle-linux-upgrade-sssd-libwbclientoracle-linux-upgrade-sssd-libwbclient-develoracle-linux-upgrade-sssd-polkit-rulesoracle-linux-upgrade-sssd-proxyoracle-linux-upgrade-sssd-toolsoracle-linux-upgrade-sssd-winbind-idmap | Jan 25, 2023 | Jan 24, 2023 |
| Redhat_linux | — | redhat-upgrade-libipa_hbacredhat-upgrade-libipa_hbac-develredhat-upgrade-libsss_autofsredhat-upgrade-libsss_certmapredhat-upgrade-libsss_certmap-develredhat-upgrade-libsss_idmapredhat-upgrade-libsss_idmap-develredhat-upgrade-libsss_nss_idmapredhat-upgrade-libsss_nss_idmap-develredhat-upgrade-libsss_simpleifpredhat-upgrade-libsss_simpleifp-develredhat-upgrade-libsss_sudoredhat-upgrade-python-libipa_hbacredhat-upgrade-python-libsss_nss_idmapredhat-upgrade-python-sssredhat-upgrade-python-sss-murmurredhat-upgrade-python-sssdconfigredhat-upgrade-sssdredhat-upgrade-sssd-adredhat-upgrade-sssd-clientredhat-upgrade-sssd-commonredhat-upgrade-sssd-common-pacredhat-upgrade-sssd-dbusredhat-upgrade-sssd-debuginforedhat-upgrade-sssd-iparedhat-upgrade-sssd-kcmredhat-upgrade-sssd-krb5redhat-upgrade-sssd-krb5-commonredhat-upgrade-sssd-ldapredhat-upgrade-sssd-libwbclientredhat-upgrade-sssd-libwbclient-develredhat-upgrade-sssd-polkit-rulesredhat-upgrade-sssd-proxyredhat-upgrade-sssd-toolsredhat-upgrade-sssd-winbind-idmap | Jan 27, 2023 | Jan 24, 2023 |
| Suse | — | suse-upgrade-libipa_hbac-develsuse-upgrade-libipa_hbac0suse-upgrade-libsss_certmap-develsuse-upgrade-libsss_certmap0suse-upgrade-libsss_idmap-develsuse-upgrade-libsss_idmap0suse-upgrade-libsss_nss_idmap-develsuse-upgrade-libsss_nss_idmap0suse-upgrade-libsss_simpleifp-develsuse-upgrade-libsss_simpleifp0suse-upgrade-python-sssd-configsuse-upgrade-python3-sssd-configsuse-upgrade-sssdsuse-upgrade-sssd-32bitsuse-upgrade-sssd-adsuse-upgrade-sssd-commonsuse-upgrade-sssd-common-32bitsuse-upgrade-sssd-dbussuse-upgrade-sssd-ipasuse-upgrade-sssd-krb5suse-upgrade-sssd-krb5-commonsuse-upgrade-sssd-ldapsuse-upgrade-sssd-proxysuse-upgrade-sssd-toolssuse-upgrade-sssd-wbclientsuse-upgrade-sssd-wbclient-develsuse-upgrade-sssd-winbind-idmap | Jan 30, 2023 | Jan 27, 2023 |
| Ubuntu | ubuntu-upgrade-sssd | Jun 13, 2023 | Feb 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub