sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sssd-kcmUpgrade libipa_hbacUpgrade sssd-proxyUpgrade libsss_idmap-develUpgrade sssd-krb5-commonUpgrade python-libipa_hbacUpgrade python-libsss_nss_idmapUpgrade sssdUpgrade sssd-adUpgrade libsss_simpleifp-develUpgrade python-sss-murmurUpgrade libsss_sudoUpgrade sssd-ldapUpgrade sssd-polkit-rulesUpgrade libsss_simpleifpUpgrade sssd-winbind-idmapUpgrade python-sssUpgrade python-sssdconfigUpgrade sssd-ipaUpgrade libsss_idmapUpgrade libsss_nss_idmap-develUpgrade sssd-clientUpgrade sssd-commonUpgrade sssd-libwbclientUpgrade libipa_hbac-develUpgrade libsss_nss_idmapUpgrade sssd-krb5Upgrade sssd-common-pacUpgrade libsss_certmap-develUpgrade sssd-toolsUpgrade libsss_certmapUpgrade libsss_autofsUpgrade sssd-dbusUpgrade sssd-libwbclient-develUpgrade sssd-debuginfo | Mar 22, 2023 | Feb 1, 2023 |
| Amazon_linux | — | Upgrade sssd | Apr 6, 2023 | Jan 24, 2023 |
| Centos_linux | — | Upgrade libsss_sudoUpgrade sssd-ipaUpgrade libsss_certmap-develUpgrade sssd-debuginfoUpgrade python-libipa_hbacUpgrade sssd-winbind-idmapUpgrade sssd-polkit-rulesUpgrade libsss_idmap-develUpgrade libsss_simpleifp-develUpgrade python-sssUpgrade sssd-libwbclientUpgrade sssd-adUpgrade libsss_simpleifpUpgrade sssd-commonUpgrade libipa_hbacUpgrade libipa_hbac-develUpgrade sssd-dbusUpgrade sssd-krb5-commonUpgrade libsss_nss_idmap-develUpgrade python-libsss_nss_idmapUpgrade python-sss-murmurUpgrade python-sssdconfigUpgrade libsss_nss_idmapUpgrade sssd-kcmUpgrade sssd-ldapUpgrade libsss_idmapUpgrade sssd-clientUpgrade libsss_certmapUpgrade libsss_autofsUpgrade sssd-toolsUpgrade sssd-common-pacUpgrade sssd-proxyUpgrade sssd-krb5Upgrade sssd-libwbclient-develUpgrade sssd | Jan 27, 2023 | Jan 24, 2023 |
| Debian | — | Upgrade sssd | May 31, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade sssdUpgrade python3-sssd | May 18, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-libsss_nss_idmapUpgrade libsss_simpleifpUpgrade python-sssdconfigUpgrade python-sssUpgrade libipa_hbacUpgrade sssd-adUpgrade sssd-ipaUpgrade sssdUpgrade sssd-krb5-commonUpgrade python-libipa_hbacUpgrade python-sss-murmurUpgrade libsss_sudoUpgrade sssd-clientUpgrade sssd-toolsUpgrade sssd-libwbclientUpgrade libsss_nss_idmapUpgrade sssd-commonUpgrade sssd-ldapUpgrade sssd-proxyUpgrade libsss_certmapUpgrade libsss_idmapUpgrade libsss_autofsUpgrade sssd-krb5Upgrade sssd-dbusUpgrade sssd-common-pac | Jun 9, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sssd-ldapUpgrade libsss_certmapUpgrade python2-sss-murmurUpgrade python3-libsss_nss_idmapUpgrade sssdUpgrade sssd-nfs-idmapUpgrade python2-libipa_hbacUpgrade sssd-krb5-commonUpgrade python3-libipa_hbacUpgrade python3-sssUpgrade libsss_autofsUpgrade sssd-adUpgrade sssd-proxyUpgrade python2-sssdconfigUpgrade sssd-krb5Upgrade libsss_simpleifpUpgrade libsss_sudoUpgrade sssd-ipaUpgrade sssd-clientUpgrade python2-sssUpgrade sssd-winbind-idmapUpgrade python3-sssdconfigUpgrade sssd-toolsUpgrade sssd-common-pacUpgrade sssd-dbusUpgrade python2-libsss_nss_idmapUpgrade sssd-libwbclientUpgrade sssd-kcmUpgrade libsss_idmapUpgrade libsss_nss_idmapUpgrade python3-sss-murmurUpgrade libipa_hbacUpgrade sssd-common | Apr 13, 2023 | Feb 1, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sssdUpgrade python3-sssd | May 10, 2023 | Feb 1, 2023 |
| Oracle_linux | — | Upgrade sssd-toolsUpgrade sssd-adUpgrade sssd-proxyUpgrade libsss_simpleifpUpgrade sssdUpgrade sssd-winbind-idmapUpgrade libsss_nss_idmapUpgrade libsss_autofsUpgrade python-libipa_hbacUpgrade libsss_idmap-develUpgrade sssd-libwbclient-develUpgrade sssd-ipaUpgrade libsss_idmapUpgrade libsss_sudoUpgrade sssd-kcmUpgrade python-libsss_nss_idmapUpgrade python-sssdconfigUpgrade python-sssUpgrade libsss_nss_idmap-develUpgrade sssd-commonUpgrade sssd-common-pacUpgrade libsss_certmap-develUpgrade python-sss-murmurUpgrade sssd-krb5-commonUpgrade libipa_hbac-develUpgrade libipa_hbacUpgrade sssd-krb5Upgrade sssd-clientUpgrade sssd-polkit-rulesUpgrade sssd-dbusUpgrade sssd-ldapUpgrade libsss_certmapUpgrade sssd-libwbclientUpgrade libsss_simpleifp-devel | Jan 25, 2023 | Jan 24, 2023 |
| Redhat_linux | — | Upgrade sssd-libwbclientUpgrade python-libipa_hbacUpgrade libsss_idmapUpgrade python-libsss_nss_idmapUpgrade libsss_sudoUpgrade sssd-ldapUpgrade sssd-libwbclient-develUpgrade sssd-krb5-commonUpgrade sssd-winbind-idmapUpgrade libsss_idmap-develUpgrade sssd-commonUpgrade python-sss-murmurUpgrade libipa_hbac-develUpgrade libsss_simpleifp-develUpgrade libsss_autofsUpgrade sssd-dbusUpgrade sssd-clientUpgrade sssd-toolsUpgrade sssd-kcmUpgrade sssd-ipaUpgrade libsss_nss_idmap-develUpgrade sssd-common-pacUpgrade libipa_hbacUpgrade sssd-krb5Upgrade sssd-debuginfoUpgrade libsss_certmapUpgrade python-sssdconfigUpgrade python-sssUpgrade libsss_nss_idmapUpgrade sssd-adUpgrade libsss_simpleifpUpgrade libsss_certmap-develUpgrade sssd-proxyUpgrade sssdUpgrade sssd-polkit-rules | Jan 27, 2023 | Jan 24, 2023 |
| Suse | — | Upgrade sssdUpgrade sssd-32bitUpgrade sssd-toolsUpgrade libsss_idmap-develUpgrade sssd-common-32bitUpgrade sssd-krb5-commonUpgrade libsss_nss_idmap0Upgrade python-sssd-configUpgrade sssd-proxyUpgrade sssd-wbclientUpgrade sssd-ipaUpgrade python3-sssd-configUpgrade sssd-winbind-idmapUpgrade libipa_hbac0Upgrade sssd-adUpgrade libsss_simpleifp0Upgrade sssd-dbusUpgrade libipa_hbac-develUpgrade libsss_nss_idmap-develUpgrade libsss_simpleifp-develUpgrade libsss_idmap0Upgrade sssd-krb5Upgrade libsss_certmap0Upgrade sssd-commonUpgrade libsss_certmap-develUpgrade sssd-wbclient-develUpgrade sssd-ldap | Jan 30, 2023 | Jan 27, 2023 |
| Ubuntu | — | Upgrade sssd | Jun 13, 2023 | Feb 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub