Red Hat Security AdvisoryRHSA-2017:3379
sssd security and bug fix update
Released 2017-12-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libipa_hbac-1.15.2-50.el7_4.8, libsss_autofs-1.15.2-50.el7_4.8, libsss_certmap-1.15.2-50.el7_4.8 +24
- Red Hat Enterprise Linux Client Optional (v. 7) libipa_hbac-devel-1.15.2-50.el7_4.8, libsss_certmap-devel-1.15.2-50.el7_4.8, libsss_idmap-devel-1.15.2-50.el7_4.8 +4
- Red Hat Enterprise Linux ComputeNode (v. 7) libipa_hbac-1.15.2-50.el7_4.8, libsss_autofs-1.15.2-50.el7_4.8, libsss_certmap-1.15.2-50.el7_4.8 +24
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libipa_hbac-devel-1.15.2-50.el7_4.8, libsss_certmap-devel-1.15.2-50.el7_4.8, libsss_idmap-devel-1.15.2-50.el7_4.8 +4
- Red Hat Enterprise Linux Server (v. 7) libipa_hbac-1.15.2-50.el7_4.8, libipa_hbac-1.15.2-50.el7_4.8.ppc, libsss_autofs-1.15.2-50.el7_4.8 +31
- Red Hat Enterprise Linux Server Optional (v. 7) libipa_hbac-devel-1.15.2-50.el7_4.8, libipa_hbac-devel-1.15.2-50.el7_4.8.ppc, libsss_certmap-devel-1.15.2-50.el7_4.8 +10
- Red Hat Enterprise Linux Workstation (v. 7) libipa_hbac-1.15.2-50.el7_4.8, libsss_autofs-1.15.2-50.el7_4.8, libsss_certmap-1.15.2-50.el7_4.8 +25
- Red Hat Enterprise Linux Workstation Optional (v. 7) libipa_hbac-devel-1.15.2-50.el7_4.8, libsss_certmap-devel-1.15.2-50.el7_4.8, libsss_idmap-devel-1.15.2-50.el7_4.8 +3
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libipa_hbac-1.15.2-50.el7_4.8, libsss_autofs-1.15.2-50.el7_4.8, libsss_certmap-1.15.2-50.el7_4.8 +25
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libipa_hbac-devel-1.15.2-50.el7_4.8, libsss_certmap-devel-1.15.2-50.el7_4.8, libsss_idmap-devel-1.15.2-50.el7_4.8 +4
Fixes 1 record
Priority MEDIUM 41
It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01511 · Published 2018-07-27 · Partial fix CWE-20
