DEBIAN-CVE-2019-3811

Advisory lineage Upstream: 1 Downstream: 2
Upstream
CVE-2019-3811
Published: 15 Jan 2019, 15:29
Last modified:10 May 2026, 17:04

Vulnerability Summary

Overall Risk (default)
low
21/100
CVSS Score
5.2 MEDIUM
3.1 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

15 Jan 2019, 15:29
Published
Vulnerability first disclosed
10 May 2026, 17:04
Last Modified
Vulnerability information updated

Description

A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.2CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Affected Systems

  • debian•sssd

    < 2.2.0-1 | < 2.2.0-1 | < 2.2.0-1 | < 2.2.0-1

References (1)