Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Ubuntu 20.04 LTS USN-6156-1 High: SSSD Remote Access Issue

ubuntu
Calendar Grey June 12, 2023
Dist Ubuntu Esm H88
A critical flaw in SSSD on Ubuntu 20.04 may result in unauthorized access to network services, necessitating prompt action.
SSSD could allow unintended access to network services.

Summary

SSSD could allow unintended access to network services.

Software Description:

- sssd: System Security Services Daemon

Details:

It was discovered that SSSD incorrrectly sanitized certificate data used in

LDAP filters. When using this issue in combination with FreeIPA, a remote

attacker could possibly use this issue to escalate privileges.

Topics%20covered

Topics Covered

security advisory high severity remote access Ubuntu unintended access SSSD

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
   sssd                            2.2.3-3ubuntu0.11

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6156-1

CVE-2022-4254

Severity
important
Lowest
Low
Medium
High
Critical

June 12, 2023

Topics%20covered

Topics Covered

security advisory high severity remote access Ubuntu unintended access SSSD

Package Information

https://launchpad.net/ubuntu/+source/sssd/2.2.3-3ubuntu0.11

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.