CVE-2022-4254: fedoraproject sssd

Modified

AliasesSUSE-SU-2023:0200-1SUSE-SU-2023:0204-1SUSE-SU-2023:0292-1+8 more

Published 01-02-2023Last modified 27-03-2025

Vulnerability summary

CVE-2022-4254 is a high (CVSS 8.8) vulnerability in fedoraproject sssd. EPSS estimates a 0.95% chance of exploitation in the next 30 days, higher than 61.3% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Prioritisepublic exploit

Public exploit (GitHub, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

8.8/10

010

High · v3.1 (CVE.org)

EPSS score

0.95%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2github, reference

Advisory lineage

Upstream 0 · Downstream 1

DLA-3436-1

Timeline

01-02-2023
PublishedVulnerability first disclosed.
27-03-2025
Last modifiedVulnerability information updated.

Description

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

CVSS metrics

5 scores · 5 sources · 1 version

v3.18.8

EPSS trend

Probability

0.95%

Chance of exploitation in the next 30 days

Percentile

61%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.95% on 05-10-2026

05-10-202604-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

githubUnverified
Sssd
Maturity: poc
referenceUnverified
Exploit Reference (bugzilla.redhat.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-90Improper Neutralization of Special Elements used in an LDAP QueryThe product constructs all or part of an LDAP query using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended LDAP query when it is sent to a downstream component.

Affected systems

Version check

Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat80 products

enterprise_linux_for_scientific_computing7.0
enterprise_linux_server7.0
enterprise_linux_server_aus8.2
enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions8.1 | 8.2
enterprise_linux_server_tus8.2
enterprise_linux_server_update_services_for_sap_solutions8.1
enterprise_linux_workstation7.0
libipa_hbac< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
libipa_hbac-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
libipa_hbac-devel< 0:1.16.5-10.el7_9.15
libsss_autofs< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
libsss_autofs-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
libsss_certmap< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
libsss_certmap-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
libsss_certmap-devel< 0:1.16.5-10.el7_9.15
libsss_idmap< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
libsss_idmap-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
libsss_idmap-devel< 0:1.16.5-10.el7_9.15
libsss_nss_idmap< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
libsss_nss_idmap-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
libsss_nss_idmap-devel< 0:1.16.5-10.el7_9.15
libsss_simpleifp< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
libsss_simpleifp-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
libsss_simpleifp-devel< 0:1.16.5-10.el7_9.15
libsss_sudo< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
libsss_sudo-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
python-libipa_hbac< 0:1.16.5-10.el7_9.15
python-libsss_nss_idmap< 0:1.16.5-10.el7_9.15
python-sss< 0:1.16.5-10.el7_9.15
python-sss-murmur< 0:1.16.5-10.el7_9.15
python-sssdconfig< 0:1.16.5-10.el7_9.15
python3-libipa_hbac< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
python3-libipa_hbac-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
python3-libsss_nss_idmap< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
python3-libsss_nss_idmap-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
python3-sss< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
python3-sss-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
python3-sss-murmur< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
python3-sss-murmur-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
python3-sssdconfig< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-ad< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-ad-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-client< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-client-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-common< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-common-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-common-pac< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-common-pac-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-dbus< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-dbus-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-debugsource< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-ipa< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-ipa-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-kcm< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-kcm-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-krb5< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-krb5-common< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-krb5-common-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-krb5-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-ldap< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-ldap-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-libwbclient< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-libwbclient-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-libwbclient-devel< 0:1.16.5-10.el7_9.15
sssd-nfs-idmap< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-nfs-idmap-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-polkit-rules< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-proxy< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-proxy-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-tools< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-tools-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3
sssd-winbind-idmap< 0:2.2.3-20.el8_2.2 | < 0:1.16.5-10.el7_9.15 | < 0:2.2.0-19.el8_1.3
sssd-winbind-idmap-debuginfo< 0:2.2.3-20.el8_2.2 | < 0:2.2.0-19.el8_1.3

Show all 80

Suse26 products

sssd&distro=SUSE Enterprise Storage 6< 1.16.1-150000.8.70.1
sssd&distro=SUSE Enterprise Storage 7< 1.16.1-150200.17.26.1
sssd&distro=SUSE Enterprise Storage 7.1< 1.16.1-150300.23.37.1
sssd&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 1.16.1-150000.8.70.1
sssd&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 1.16.1-150200.17.26.1

Show all 26

Debian1 product

sssd< 2.3.1-1

Fedoraproject1 product

sssd≥ 1.15.3, < 2.3.1

Opensuse1 product

sssd&distro=openSUSE Leap Micro 5.2< 1.16.1-150300.23.37.1

Ubuntu1 product

sssdAll versions (No fix recorded) | < 2.2.3-3ubuntu0.11

6 vendors · 110 products

References

25 links

bugzilla.redhat.com/show_bug.cgi?id=2149894REPORTExploitIssue TrackingPatchThird Party Advisory
github.com/SSSD/sssd/issues/5135ExploitIssue TrackingPatchThird Party Advisory
github.com/SSSD/sssd/commit/a2b9a84460429181f2a4fa7e2bb5ab49fd561274PatchThird Party Advisory
access.redhat.com/security/cve/CVE-2022-4254REPORTThird Party Advisory
lists.debian.org/debian-lts-announce/2023/05/msg00028.htmlMailing List
www.suse.com/support/update/announcement/2023/suse-su-20230200-1/Advisory
bugzilla.suse.com/1207474REPORT
www.suse.com/security/cve/CVE-2022-4254WEB
www.suse.com/support/update/announcement/2023/suse-su-20230204-1/Advisory
www.suse.com/support/update/announcement/2023/suse-su-20230292-1/Advisory

Show all 25 references

www.suse.com/support/update/announcement/2023/suse-su-20230300-1/Advisory
www.suse.com/support/update/announcement/2023/suse-su-20230301-1/Advisory
bugzilla.suse.com/1203583REPORT
access.redhat.com/errata/RHSA-2023:0397Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0397.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2022-4254AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2022-4254Advisory
access.redhat.com/errata/RHSA-2023:0403Advisory
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0403.jsonAdvisory
access.redhat.com/errata/RHSA-2023:0442Advisory
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0442.jsonAdvisory
ubuntu.com/security/CVE-2022-4254REPORT
ubuntu.com/security/notices/USN-6156-1Advisory
security-tracker.debian.org/tracker/CVE-2022-4254Advisory