HIGH🇵🇱 Wersja polska

CVE-2022-4254

CVSS 8.8v3.1pub. 2023-02-01upd. 2025-03-27

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Fedora Project Sssd

    APP
    Fedoraproject
    1.15.3 – 2.3.1 (excl.)

  • Red Hat Enterprise Linux

    OS
    Redhat
    8.0

  • Red Hat Enterprise Linux Desktop

    OS
    Redhat
    7.0

  • Red Hat Enterprise Linux For IBM Z Systems

    OS
    Redhat
    7.0

  • Red Hat Enterprise Linux For Power Big Endian

    OS
    Redhat
    7.0

  • Red Hat Enterprise Linux For Power Little Endian

    OS
    Redhat
    7.0

  • Red Hat Enterprise Linux For Scientific Computing

    OS
    Redhat
    7.0

  • Red Hat Enterprise Linux Server

    OS
    Redhat
    7.0

  • Red Hat Enterprise Linux Server Aus

    OS
    Redhat
    8.2

  • Red Hat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions

    OS
    Redhat
    8.18.2

  • Red Hat Enterprise Linux Server Tus

    OS
    Redhat
    8.2

  • Red Hat Enterprise Linux Server Update Services For Sap Solutions

    OS
    Redhat
    8.1

  • Red Hat Enterprise Linux Workstation

    OS
    Redhat
    7.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2021-40438CRITICAL9.0⚠ KEVPL ✓same product

SSRF w mod_proxy Apache HTTP Server — przekierowanie żądań przez atakującego

CVE-2019-5544CRITICAL9.8⚠ KEVPL ✓same product

Krytyczny heap overwrite w OpenSLP dla VMware ESXi i Horizon DaaS

CVE-2018-14667CRITICAL9.8⚠ KEVPL ✓same product

RCE przez EL injection w RichFaces Framework 3.X — brak uwierzytelnienia

CVE-2016-4171CRITICAL9.8⚠ KEVPL ✓same product

RCE w Adobe Flash Player 21.0.0.242 i wcześniejszych — aktywnie exploitowany