A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libipa-hbac-dev" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libipa-hbac0" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libipa-hbac0-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libnss-sss" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libnss-sss-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libpam-sss" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libpam-sss-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-certmap-dev" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-certmap0" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-certmap0-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-idmap-dev" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-idmap0" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-idmap0-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-nss-idmap-dev" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-nss-idmap0" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-nss-idmap0-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-simpleifp-dev" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-simpleifp0" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-simpleifp0-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-sudo" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libsss-sudo-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libwbclient-sssd" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libwbclient-sssd-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "libwbclient-sssd-dev" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "python-libipa-hbac" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "python-libipa-hbac-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "python-libsss-nss-idmap" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "python-libsss-nss-idmap-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "python-sss" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "python-sss-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "python3-libipa-hbac" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "python3-libipa-hbac-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "python3-libsss-nss-idmap" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "python3-libsss-nss-idmap-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "python3-sss" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "python3-sss-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-ad" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-ad-common" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-ad-common-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-ad-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-common" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-common-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-dbus" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-dbus-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-ipa" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-ipa-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-kcm" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-kcm-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-krb5" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-krb5-common" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-krb5-common-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-krb5-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-ldap" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-ldap-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-proxy" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-proxy-dbgsym" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-tools" }, { "binary_version": "1.16.1-1ubuntu1.8", "binary_name": "sssd-tools-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libipa-hbac-dev" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libipa-hbac0" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libipa-hbac0-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libnss-sss" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libnss-sss-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libpam-sss" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libpam-sss-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-certmap-dev" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-certmap0" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-certmap0-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-idmap-dev" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-idmap0" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-idmap0-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-nss-idmap-dev" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-nss-idmap0" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-nss-idmap0-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-simpleifp-dev" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-simpleifp0" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-simpleifp0-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-sudo" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libsss-sudo-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libwbclient-sssd" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libwbclient-sssd-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "libwbclient-sssd-dev" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "python3-libipa-hbac" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "python3-libipa-hbac-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "python3-libsss-nss-idmap" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "python3-libsss-nss-idmap-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "python3-sss" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "python3-sss-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-ad" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-ad-common" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-ad-common-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-ad-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-common" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-common-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-dbus" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-dbus-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-ipa" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-ipa-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-kcm" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-kcm-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-krb5" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-krb5-common" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-krb5-common-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-krb5-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-ldap" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-ldap-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-proxy" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-proxy-dbgsym" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-tools" }, { "binary_version": "2.2.3-3ubuntu0.7", "binary_name": "sssd-tools-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libipa-hbac-dev" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libipa-hbac0" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libipa-hbac0-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libnss-sss" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libnss-sss-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libpam-sss" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libpam-sss-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-certmap-dev" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-certmap0" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-certmap0-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-idmap-dev" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-idmap0" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-idmap0-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-nss-idmap-dev" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-nss-idmap0" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-nss-idmap0-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-simpleifp-dev" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-simpleifp0" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-simpleifp0-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-sudo" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libsss-sudo-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libwbclient-sssd" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libwbclient-sssd-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "libwbclient-sssd-dev" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "python3-libipa-hbac" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "python3-libipa-hbac-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "python3-libsss-nss-idmap" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "python3-libsss-nss-idmap-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "python3-sss" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "python3-sss-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-ad" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-ad-common" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-ad-common-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-ad-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-common" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-common-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-dbus" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-dbus-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-ipa" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-ipa-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-kcm" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-kcm-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-krb5" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-krb5-common" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-krb5-common-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-krb5-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-ldap" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-ldap-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-proxy" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-proxy-dbgsym" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-tools" }, { "binary_version": "2.4.1-2ubuntu4", "binary_name": "sssd-tools-dbgsym" } ] }