CVE-2022-4254

Description

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2149894 ↗
• https://github.com/SSSD/sssd/issues/5135 ↗
• https://github.com/SSSD/sssd/commit/a2b9a84460429181f2a4fa7e2bb5ab49fd561274 ↗
• https://access.redhat.com/security/cve/CVE-2022-4254 ↗
• https://lists.debian.org/debian-lts-announce/2023/05/msg00028.html ↗