Summary
It was discovered that SSSD incorrrectly sanitized certificate data used in
LDAP filters. When using this issue in combination with FreeIPA, a remote
attacker could possibly use this issue to escalate privileges.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | sssd | 2.2.3-3ubuntu0.11 |
Vulnerabilities 1
-
High 8.8
sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
References
-
report
https://ubuntu.com/security/CVE-2022-4254