rpm package
suse/sssd&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
pkg:rpm/suse/sssd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-4254 | Hig | 8.8 | < 1.16.1-150000.8.70.1 | 1.16.1-150000.8.70.1 | Feb 1, 2023 | sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters | |
| CVE-2021-3621 | Hig | 8.8 | < 1.16.1-8.64.1 | 1.16.1-8.64.1 | Dec 23, 2021 | A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access |
- affected < 1.16.1-150000.8.70.1fixed 1.16.1-150000.8.70.1
sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
- affected < 1.16.1-8.64.1fixed 1.16.1-8.64.1
A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access