CVE-2022-4254

HIGH CVSS: 8.8 Published: 2023-02-01 Modified: 2026-06-17

Description

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

Affected Platforms

Redhat Enterprise Linux For Ibm Z SystemsRedhat Enterprise Linux Server TusRedhat Enterprise Linux Server Update Services For Sap SolutionsRedhat Enterprise LinuxRedhat Enterprise Linux For Power Little EndianFedoraproject SssdRedhat Enterprise Linux DesktopRedhat Enterprise Linux ServerRedhat Enterprise Linux WorkstationRedhat Enterprise Linux Server Aus

Weakness Type

CWE-90, CWE-90

References

https://access.redhat.com/security/cve/CVE-2022-4254
https://bugzilla.redhat.com/show_bug.cgi?id=2149894
https://github.com/SSSD/sssd/commit/a2b9a84460429181f2a4fa7e2bb5ab49fd561274
https://github.com/SSSD/sssd/issues/5135
https://lists.debian.org/debian-lts-announce/2023/05/msg00028.html
https://access.redhat.com/security/cve/CVE-2022-4254