CVE:CVE-2022-4254
CNNVD:CNNVD-202301-1780
SSSD是一款提供本地或远程身份和身份验证资源访问的守护程序。
SSSD存在注入漏洞，该漏洞源于PKINIT使客户端能够使用X.509证书和相应的私钥而不是口令或密钥表向KDC进行身份验证。
solution:Upgrade fedoraproject sssd to a higher version than 2.3.1,and avoid the version [1.15.3,2.3.1); Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_for_power_big_endian to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_for_power_little_endian to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_for_scientific_computing to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,and avoid the version 8.2; Upgrade redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions to a higher version than 8.1,8.2,and avoid the version 8.1,8.2; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,and avoid the version 8.2; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 8.1,and avoid the version 8.1; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0