A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo privileges on all SSSD-enrolled hosts.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsss_simpleifpUpgrade sssd-winbind-idmapUpgrade python3-libipa_hbacUpgrade python3-libsss_nss_idmapUpgrade sssd-adUpgrade libipa_hbacUpgrade libsss_sudoUpgrade sssd-krb5-commonUpgrade libsss_idmapUpgrade sssd-ipaUpgrade sssd-nfs-idmapUpgrade sssdUpgrade libsss_nss_idmapUpgrade sssd-toolsUpgrade sssd-proxyUpgrade sssd-commonUpgrade python3-sssdconfigUpgrade sssd-ldapUpgrade sssd-common-pacUpgrade libsss_nss_idmap-develUpgrade python3-sss-murmurUpgrade sssd-kcmUpgrade libsss_certmapUpgrade sssd-krb5Upgrade sssd-dbusUpgrade sssd-polkit-rulesUpgrade python3-sssUpgrade libsss_autofsUpgrade sssd-idpUpgrade sssd-client | Jul 26, 2026 | Jul 20, 2026 |
| Amazon Linux Ami 2 | — | Upgrade python-libsss_nss_idmapUpgrade sssd-kcmUpgrade libsss_sudoUpgrade sssd-ipaUpgrade sssd-dbusUpgrade python-sssUpgrade libsss_idmapUpgrade sssd-polkit-rulesUpgrade sssd-proxyUpgrade sssd-debuginfoUpgrade libsss_idmap-develUpgrade sssd-winbind-idmapUpgrade libsss_nss_idmap-develUpgrade sssd-adUpgrade sssd-krb5-commonUpgrade libsss_nss_idmapUpgrade sssd-toolsUpgrade libipa_hbacUpgrade sssd-libwbclientUpgrade python-sssdconfigUpgrade sssd-commonUpgrade python-libipa_hbacUpgrade libipa_hbac-develUpgrade sssd-common-pacUpgrade sssd-clientUpgrade sssd-ldapUpgrade sssd-libwbclient-develUpgrade libsss_autofsUpgrade python-sss-murmurUpgrade libsss_simpleifpUpgrade libsss_certmap-develUpgrade sssd-krb5Upgrade libsss_certmapUpgrade sssdUpgrade libsss_simpleifp-devel | Aug 5, 2026 | Aug 5, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 19, 2026 | Jul 7, 2026 |
| Redhat_linux | — | Upgrade sssd-toolsUpgrade libsss_idmapUpgrade python3-sss-debuginfoUpgrade sssd-kcm-debuginfoUpgrade sssd-common-pac-debuginfoUpgrade python3-libsss_nss_idmapUpgrade sssd-libwbclientUpgrade sssd-passkeyUpgrade sssd-proxy-debuginfoUpgrade sssd-proxyUpgrade sssd-ipa-debuginfoUpgrade sssd-debugsourceUpgrade sssd-ldapUpgrade python3-libsss_nss_idmap-debuginfoUpgrade sssd-winbind-idmap-debuginfoUpgrade sssd-libwbclient-develUpgrade sssd-debuginfoUpgrade sssd-nfs-idmapUpgrade libsss_simpleifpUpgrade python3-libipa_hbacUpgrade libsss_autofsUpgrade sssd-nfs-idmap-debuginfoUpgrade libsss_idmap-debuginfoUpgrade sssd-commonUpgrade sssd-tools-debuginfoUpgrade sssd-winbind-idmapUpgrade sssd-common-debuginfoUpgrade sssd-clientUpgrade sssd-krb5Upgrade sssd-common-pacUpgrade sssd-ipaUpgrade libsss_sudoUpgrade libsss_nss_idmapUpgrade libsss_idmap-develUpgrade python3-libipa_hbac-debuginfoUpgrade python3-sss-murmurUpgrade python-libsss_nss_idmapUpgrade sssd-krb5-debuginfoUpgrade python-sss-murmurUpgrade python-libipa_hbacUpgrade libsss_certmap-develUpgrade libsss_certmap-debuginfoUpgrade sssd-passkey-debuginfoUpgrade libsss_autofs-debuginfoUpgrade sssd-krb5-common-debuginfoUpgrade python-sssUpgrade sssd-adUpgrade libipa_hbac-debuginfoUpgrade sssdUpgrade sssd-dbusUpgrade sssd-kcmUpgrade libipa_hbac-develUpgrade libsss_nss_idmap-debuginfoUpgrade python-sssdconfigUpgrade libsss_sudo-debuginfoUpgrade libipa_hbacNo solution existsUpgrade python3-sssUpgrade sssd-client-debuginfoUpgrade libsss_simpleifp-develUpgrade libsss_simpleifp-debuginfoUpgrade libsss_nss_idmap-develUpgrade python3-sss-murmur-debuginfoUpgrade sssd-ldap-debuginfoUpgrade libsss_certmapUpgrade sssd-polkit-rulesUpgrade sssd-krb5-commonUpgrade sssd-idpUpgrade sssd-ad-debuginfoUpgrade python3-sssdconfigUpgrade sssd-idp-debuginfoUpgrade sssd-dbus-debuginfo | Jul 17, 2026 | Jul 7, 2026 |
| Rocky_linux | — | Upgrade sssd-idpUpgrade libsss_certmap-debuginfoUpgrade sssd-clientUpgrade libsss_nss_idmap-develUpgrade sssd-passkey-debuginfoUpgrade python3-sss-murmurUpgrade sssd-kcmUpgrade sssd-krb5-commonUpgrade sssd-idp-debuginfoUpgrade sssd-krb5-debuginfoUpgrade sssd-proxy-debuginfoUpgrade sssd-common-pacUpgrade sssd-kcm-debuginfoUpgrade sssd-dbus-debuginfoUpgrade sssd-krb5Upgrade libsss_autofs-debuginfoUpgrade libipa_hbac-debuginfoUpgrade sssd-nfs-idmap-debuginfoUpgrade sssd-dbusUpgrade python3-libipa_hbac-debuginfoUpgrade libsss_certmapUpgrade libsss_certmap-develUpgrade libsss_nss_idmap-debuginfoUpgrade sssd-ldap-debuginfoUpgrade sssd-polkit-rulesUpgrade python3-sssUpgrade sssd-commonUpgrade sssd-tools-debuginfoUpgrade sssd-passkeyUpgrade python3-libsss_nss_idmapUpgrade sssd-common-debuginfoUpgrade python3-libsss_nss_idmap-debuginfoUpgrade sssd-ipaUpgrade sssd-winbind-idmap-debuginfoUpgrade libsss_simpleifp-debuginfoUpgrade libsss_sudoUpgrade sssd-toolsUpgrade sssd-ldapUpgrade libsss_simpleifpUpgrade libsss_idmap-develUpgrade sssd-common-pac-debuginfoUpgrade libsss_sudo-debuginfoUpgrade sssd-ipa-debuginfoUpgrade python3-sss-debuginfoUpgrade sssd-client-debuginfoUpgrade sssdUpgrade python3-sss-murmur-debuginfoUpgrade libsss_nss_idmapUpgrade sssd-winbind-idmapUpgrade sssd-krb5-common-debuginfoUpgrade sssd-debugsourceUpgrade python3-libipa_hbacUpgrade libipa_hbacUpgrade sssd-proxyUpgrade sssd-debuginfoUpgrade libsss_idmap-debuginfoUpgrade sssd-adUpgrade sssd-nfs-idmapUpgrade sssd-ad-debuginfoUpgrade libsss_idmapUpgrade libsss_autofs | Jul 27, 2026 | Jul 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub