{"id":"CVE-2019-3811","aliases":["CLSA-2026-1777482027","CLSA-2026-1777683406","DEBIAN-CVE-2019-3811","DLA-1635-1","DLA-3436-1","EUVD-2019-13434","GHSA-x3cx-wjrx-m7rj","MGASA-2019-0152","RHSA-2019:2177","SUSE-SU-2019:0542-1","SUSE-SU-2019:0552-1","SUSE-SU-2019:0556-1","SUSE-SU-2019:0805-1","UBUNTU-CVE-2019-3811","USN-5067-1","openSUSE-SU-2019:0344-1","openSUSE-SU-2024:13446-1"],"status":"published","title":"A vulnerability was found in sssd. If a user was configured with no home directory set, sssd...","description":"A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.","severity":{"version":"3.0","score":4.1,"vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00702,"percentile":0.53519,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-552"],"published":"2019-01-15T15:00:00Z","modified":"2026-11-07T11:00:11Z","fixes":[{"ecosystem":"Debian:12","package":"sssd","fixed_in":["2.2.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sssd","fixed_in":["2.2.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sssd","fixed_in":["2.2.0-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"sssd","fixed_in":["1.11.7-3+deb8u2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"sssd","fixed_in":["1.16.1-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"sssd","fixed_in":["1.11.5.1-10.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"adcli","fixed_in":["0.8.2-1.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"sssd","fixed_in":["1.13.4-34.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"sssd","fixed_in":["1.13.4-34.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"adcli","fixed_in":["0.8.2-1.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"sssd","fixed_in":["1.13.4-34.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"adcli","fixed_in":["0.8.2-1.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"sssd","fixed_in":["1.13.4-34.31.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"sssd","fixed_in":["1.16.1-1ubuntu1.8"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"adcli","fixed_in":["0.8.2-lp150.4.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"sssd","fixed_in":["1.16.1-lp150.2.9.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libsss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libsss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libsss_nss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libsss_simpleifp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libsss_simpleifp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"python-libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"python-libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"python-sss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"python-sss-murmur","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"python-sssdconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sssd-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sssd-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sssd-common-pac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sssd-dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sssd-ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sssd-krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sssd-krb5-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sssd-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sssd-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libsss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libsss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libsss_nss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libsss_simpleifp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libsss_simpleifp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-sss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-sss-murmur","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-sssdconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sssd-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sssd-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sssd-common-pac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sssd-dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sssd-ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sssd-krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sssd-krb5-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sssd-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sssd-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-60.0.4.el6_10.2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.7-3+deb8u2"}]}],"versions":["1.11.7-3","1.11.7-3+deb8u1"]},{"source":"osv","ecosystem":"Debian:10","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.2+deb10u1"}]}],"versions":["1.16.3-3.1","1.16.3-3.2"],"bundled":4},{"source":"osv","ecosystem":"Mageia:6","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.12-1.2.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.4-9.5.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsss_autofs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsss_certmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsss_simpleifp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsss_sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-sss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-sss-murmur","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-sssdconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-common-pac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-kcm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-krb5-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-libwbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-polkit-rules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-winbind-idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsss_certmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsss_nss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libsss_simpleifp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sssd-libwbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsss_autofs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsss_certmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsss_simpleifp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsss_sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-sss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-sss-murmur","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-sssdconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-common-pac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-kcm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-krb5-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-libwbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-polkit-rules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-winbind-idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsss_certmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsss_nss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libsss_simpleifp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sssd-libwbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsss_autofs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsss_certmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsss_simpleifp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsss_sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-sss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-sss-murmur","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-sssdconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-common-pac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-kcm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-krb5-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-libwbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-polkit-rules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-winbind-idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsss_certmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsss_nss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libsss_simpleifp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sssd-libwbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsss_autofs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsss_certmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsss_simpleifp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsss_sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-libsss_nss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-sss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-sss-murmur","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-sssdconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-common-pac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-kcm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-krb5-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-libwbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-polkit-rules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-winbind-idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsss_certmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsss_nss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libsss_simpleifp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sssd-libwbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.4-21.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.5.1-10.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-4.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-4.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-4.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-4.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"adcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-1.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.4-34.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.4-34.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"adcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-1.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.4-34.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"adcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-1.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.4-34.31.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.5-2","1.13.1-2","1.13.2-1","1.13.3-1","1.13.4-1","1.13.4-1ubuntu1","1.13.4-1ubuntu1.1","1.13.4-1ubuntu1.2","1.13.4-1ubuntu1.5","1.13.4-1ubuntu1.6","1.13.4-1ubuntu1.7","1.13.4-1ubuntu1.8","1.13.4-1ubuntu1.9","1.13.4-1ubuntu1.10","1.13.4-1ubuntu1.11","1.13.4-1ubuntu1.12","1.13.4-1ubuntu1.13","1.13.4-1ubuntu1.14","1.13.4-1ubuntu1.15","1.13.4-1ubuntu1.15+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-1ubuntu1.8"}]}],"versions":["1.15.3-2ubuntu1","1.15.3-3ubuntu1","1.16.0-5ubuntu1","1.16.0-5ubuntu2","1.16.1-1ubuntu1","1.16.1-1ubuntu1.1","1.16.1-1ubuntu1.2","1.16.1-1ubuntu1.3","1.16.1-1ubuntu1.4","1.16.1-1ubuntu1.5","1.16.1-1ubuntu1.6","1.16.1-1ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-1ubuntu1.8"}]}],"versions":["1.15.3-2ubuntu1","1.15.3-3ubuntu1","1.16.0-5ubuntu1","1.16.0-5ubuntu2","1.16.1-1ubuntu1","1.16.1-1ubuntu1.1","1.16.1-1ubuntu1.2","1.16.1-1ubuntu1.3","1.16.1-1ubuntu1.4","1.16.1-1ubuntu1.5","1.16.1-1ubuntu1.6","1.16.1-1ubuntu1.7"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.3-3ubuntu0.7"}]}],"versions":["2.2.0-4ubuntu1","2.2.2-1","2.2.2-1ubuntu1","2.2.3-1.1ubuntu1","2.2.3-2","2.2.3-3","2.2.3-3ubuntu0.1","2.2.3-3ubuntu0.2","2.2.3-3ubuntu0.3","2.2.3-3ubuntu0.4","2.2.3-3ubuntu0.6"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"adcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-lp150.4.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-lp150.2.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3-2.1"}]}],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"fedoraproject","product":"sssd"},{"vendor":"opensuse","product":"leap"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"the sssd project","product":"sssd"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2019/01/msg00011.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/106644","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3811","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00026.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00045.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2177","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00028.html","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3811","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3811","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656618","tags":["report"]},{"url":"https://github.com/advisories/GHSA-x3cx-wjrx-m7rj"},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1777482027.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1777683406.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-3811","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0152.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24478","tags":["report"]},{"url":"https://www.debian.org/security/2019/dsa-4397","tags":["web"]},{"url":"http://lists.suse.com/pipermail/sle-security-updates/2019-March/005173.html","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2019-03/msg00075.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1645461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1653759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1658994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1677355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1677665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1679173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1710286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1711832","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2177.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16838","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16838","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16838","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3811","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190542-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1004220","tags":["report"]},{"url":"https://bugzilla.suse.com/1087320","tags":["report"]},{"url":"https://bugzilla.suse.com/1120852","tags":["report"]},{"url":"https://bugzilla.suse.com/1121759","tags":["report"]},{"url":"https://bugzilla.suse.com/1125277","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3811","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190552-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1039567","tags":["report"]},{"url":"https://bugzilla.suse.com/1082568","tags":["report"]},{"url":"https://bugzilla.suse.com/976038","tags":["report"]},{"url":"https://bugzilla.suse.com/977224","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190556-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1098377","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10852","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190805-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1109849","tags":["report"]},{"url":"https://bugzilla.suse.com/1110121","tags":["report"]},{"url":"https://bugzilla.suse.com/1125617","tags":["report"]},{"url":"https://bugzilla.suse.com/1127670","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3811","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5067-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-10852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16838","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3621","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NT6ZEFQ4B6JZKL6AAQC6N4XDZ2JOD7Z3/#NT6ZEFQ4B6JZKL6AAQC6N4XDZ2JOD7Z3","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3621","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-3811","description":"A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.","status":"published","published":"2019-01-15T15:00:00Z","modified":"2025-02-13T16:27:24.771Z","cvss":[{"version":"3.0","score":4.1,"vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-552","CWE-200"],"updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13434","description":"A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.","status":"published","published":"2019-01-15T15:00:00Z","modified":"2025-02-13T16:27:24Z","cvss":[{"version":"3.0","score":4.1,"vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:03:53.290549Z"}],"ghsa":[{"id":"GHSA-x3cx-wjrx-m7rj","title":"A vulnerability was found in sssd. If a user was configured with no home directory set, sssd...","description":"A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.","status":"published","published":"2022-05-13T01:05:22Z","modified":"2023-05-29T18:30:32Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:54:37.218716Z"}],"nvd":[{"id":"CVE-2019-3811","description":"A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.","status":"published","published":"2019-01-15T15:29:00.36Z","modified":"2026-06-17T02:35:38.247Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.0","score":4.1,"vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":2.7,"vector":"AV:A/AC:L/Au:S/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-200","CWE-552"],"updated_at":"2026-11-02T14:05:02.989216Z"}],"osv":[{"id":"CVE-2019-3811","description":"A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.","status":"published","published":"2019-01-15T15:29:00.36Z","modified":"2026-10-24T10:30:25.696184605Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:12.363788Z"},{"id":"DEBIAN-CVE-2019-3811","description":"A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.","status":"published","published":"2019-01-15T15:29:00.36Z","modified":"2026-11-07T11:00:11.244347463Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-07T11:15:14.449016Z"},{"id":"RHSA-2019:2177","title":"Red Hat Security Advisory: sssd security, bug fix, and enhancement update","status":"published","published":"2024-09-16T02:12:49Z","modified":"2026-06-28T10:31:08Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2019-3811","description":"A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.","status":"published","published":"2019-01-15T15:29:00Z","modified":"2026-09-03T16:01:17.436212975Z","cvss":[{"version":"3.0","score":4.1,"vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"medium"},{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:21.213407Z"},{"id":"CLSA-2026-1777482027","title":"sssd: Fix of 2 CVEs","description":"- CVE-2018-10852: create the sudo responder socket with stricter\n  permissions\n- CVE-2019-3811: do not return \"/\" as the home directory when the user\n  has no homedir configured","status":"published","published":"2026-04-29T17:00:32Z","modified":"2026-06-01T00:33:25.90032196Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777683406","title":"sssd: Fix of 2 CVEs","description":"- CVE-2018-10852: create the sudo responder socket with stricter\n  permissions\n- CVE-2019-3811: do not return \"/\" as the home directory when the user\n  has no homedir configured","status":"published","published":"2026-05-02T00:56:51Z","modified":"2026-06-01T00:33:16.852615286Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-1635-1","title":"sssd - security update","status":"published","published":"2019-01-17T00:00:00Z","modified":"2026-03-09T01:18:25.627344Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-3436-1","title":"sssd - security update","status":"published","published":"2023-05-29T00:00:00Z","modified":"2026-03-09T01:21:27.334209Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2019-0152","title":"Updated ldb packages fix security vulnerability","description":"Garming Sam reported an out-of-bounds read in the ldb_wildcard_compare()\nfunction of ldb, resulting in denial of service (CVE-2019-3824).\n\nThe ldb package has been updated to version 1.2.4 to fix this issue.\nThe sssd and samba packages have been rebuilt against the updated ldb.\n\nIf a user was configured with no home directory set, sssd would return '/'\n(the root directory) instead of '' (the empty string / no home directory).\nThis could impact services that restrict the user's filesystem access to\nwithin their home directory through chroot() etc. All versions before 2.1\nare vulnerable. (CVE-2019-3811)\n","status":"published","published":"2019-05-07T21:38:09Z","modified":"2026-04-16T04:43:04.209261296Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:0344-1","title":"Security update for sssd","description":"This update for sssd fixes the following issues:\n\nSecurity vulnerability addresed:\n\n- CVE-2019-3811: Fix fallback_homedir returning '/' for empty home directories\n  (bsc#1121759)\n\nOther bug fixes and changes:\n\n- Install logrotate configuration (bsc#1004220)\n- Align systemd service file with upstream, run interactive and\n  change service type to notify (bsc#1120852)\n- Fix sssd not starting in foreground mode (bsc#1125277)\n- Strip whitespaces in netgroup triples (bsc#1087320)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-03-23T11:14:48Z","modified":"2026-02-04T04:38:38.962933Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:13446-1","title":"libipa_hbac-devel-2.9.3-2.1 on GA media","description":"These are all security issues fixed in the libipa_hbac-devel-2.9.3-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:47:22.712203Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2019:0542-1","title":"Security update for sssd","description":"This update for sssd fixes the following issues:\n\nSecurity vulnerability addresed:\n\n- CVE-2019-3811: Fix fallback_homedir returning '/' for empty home directories\n  (bsc#1121759)\n\nOther bug fixes and changes:\n\n- Install logrotate configuration (bsc#1004220)\n- Align systemd service file with upstream, run interactive and\n  change service type to notify (bsc#1120852)\n- Fix sssd not starting in foreground mode (bsc#1125277)\n- Strip whitespaces in netgroup triples (bsc#1087320)\n","status":"published","published":"2019-03-05T12:28:19Z","modified":"2026-02-04T04:35:18.288964Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0552-1","title":"Security update for sssd","description":"This update for sssd fixes the following issues:\n\nSecurity vulnerability fixed:\n\n- CVE-2019-3811: Fix fallback_homedir returning '/' for empty home directories\n  (bsc#1121759)\n\nOther bug fixes and changes:\n\n- Skip sdap_save_grpmem() if ignore_group_members is set. (bsc#1082568)\n- Only search for primary group if it is not already cached (bsc#1082568)\n- Install /var/lib/sss/mc directory to correct sssd cache invalidation\n  behaviour. Spec patch authored by Josef Cejka. (bsc#1039567)\n  to fix a segfault in sudo provider (bsc#977224).\n- Fix a segfault in sss_cache (bsc#976038).\n","status":"published","published":"2019-03-06T08:47:58Z","modified":"2026-02-04T03:22:27.166851Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0556-1","title":"Security update for sssd","description":"This update for sssd fixes the following issues:\n\nSecurity vulnerabilities addressed:\n\n- Fix fallback_homedir returning '/' for empty home directories\n  (CVE-2019-3811) (bsc#1121759)\n- Create sockets with right permissions (bsc#1098377, CVE-2018-10852)\n\nOther bug fixes and changes:\n\n- Install logrotate configuration (bsc#1004220)\n- Strip whitespaces in netgroup triples (bsc#1087320)\n- Align systemd service file with upstream\n  * Run interactive and change service type to notify (bsc#1120852)\n  * Replace deprecated '-f' and use '--logger'\n","status":"published","published":"2019-03-06T09:57:00Z","modified":"2026-02-04T03:29:03.50651Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0805-1","title":"Recommended update for adcli, sssd","description":"\nThis update for adcli and sssd provides the following improvement:\n\nSecurity vulnerability fixed:\n\n- CVE-2019-3811: Fix fallback_homedir returning '/' for empty home directories\n  (bsc#1121759)\n\nOther fixes:\n\n- Add an option to disable checking for trusted domains in the subdomains provider (bsc#1125617)\n- Clear pid file in corner cases (bsc#1127670)\n- Fix child unable to write to log file after SIGHUP (bsc#1127670)\n- Include adcli in SUSE Linux Enterprise 12 SP3 for sssd-ad. (fate#326619, bsc#1109849)\n\nThe adcli enables sssd to do password renewal when using Active Directory.\n  ","status":"published","published":"2019-03-29T12:16:16Z","modified":"2026-02-04T02:37:36.136951Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-5067-1","title":"sssd vulnerabilities","description":"Jakub Hrozek discovered that SSSD incorrectly handled file permissions. A\nlocal attacker could possibly use this issue to read the sudo rules\navailable for any user. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2018-10852)\n\nIt was discovered that SSSD incorrectly handled Group Policy Objects. When\nSSSD is configured with too strict permissions causing the GPO to not be\nreadable, SSSD will allow all authenticated users to login instead of being\ndenied, contrary to expectations. This issue only affected Ubuntu 18.04\nLTS. (CVE-2018-16838)\n\nIt was discovered that SSSD incorrectly handled users with no home\ndirectory set. When no home directory was set, SSSD would return the root\ndirectory instead of an empty string, possibly bypassing security measures.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2019-3811)\n\nCedric Buissart discovered that SSSD incorrectly handled the sssctl\ncommand. In certain environments, a local user could use this issue to\nexecute arbitrary commands and possibly escalate privileges.\n(CVE-2021-3621)\n","status":"published","published":"2021-09-08T11:40:23Z","modified":"2026-04-27T16:03:38.473680092Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}