CVE-2021-3621: Command Injection
First published: Wed Jun 23 2021(Updated: )
A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/sssd | <0:1.16.5-10.el7_9.10 | 0:1.16.5-10.el7_9.10 |
| redhat/sssd | <0:2.4.0-9.el8_4.2 | 0:2.4.0-9.el8_4.2 |
| redhat/sssd | <0:2.2.0-19.el8_1.2 | 0:2.2.0-19.el8_1.2 |
| redhat/sssd | <0:2.2.3-20.el8_2.1 | 0:2.2.3-20.el8_2.1 |
| redhat/redhat-virtualization-host | <0:4.3.18-20210903.0.el7_9 | 0:4.3.18-20210903.0.el7_9 |
| redhat/redhat-virtualization-host | <0:4.4.7-20210804.0.el8_4 | 0:4.4.7-20210804.0.el8_4 |
| Sssd Sssd | =2.6.0 | |
| Redhat Virtualization | =4.0 | |
| Redhat Virtualization Host | =4.0 | |
| Redhat Enterprise Linux | =6.0 | |
| Redhat Enterprise Linux | =7.0 | |
| Redhat Enterprise Linux | =8.0 | |
| Redhat Enterprise Linux Eus | =8.1 | |
| Redhat Enterprise Linux Eus | =8.2 | |
| Redhat Enterprise Linux Server Aus | =8.2 | |
| Redhat Enterprise Linux Server Aus | =8.4 | |
| Redhat Enterprise Linux Server Tus | =8.2 | |
| Redhat Enterprise Linux Server Tus | =8.4 | |
| Fedoraproject Fedora | =34 | |
| redhat/sssd | <2.6.0 | 2.6.0 |
| Fedoraproject Sssd | =2.6.0 |
Remedy
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1975142
- https://lists.debian.org/debian-lts-announce/2023/05/msg00028.html
- https://sssd.io/release-notes/sssd-2.6.0.html
- https://access.redhat.com/errata/RHSA-2021:3151
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1993910
- https://access.redhat.com/security/cve/cve-2021-3621
- https://access.redhat.com/errata/RHSA-2021:3178
- https://access.redhat.com/errata/RHSA-2021:3235
- https://github.com/SSSD/sssd/commit/7ab83f97e1cbefb78ece17232185bdd2985f0bbe
- https://access.redhat.com/errata/RHSA-2021:3336
- https://access.redhat.com/errata/RHSA-2021:3365
- https://access.redhat.com/errata/RHSA-2021:3477
- https://www.cve.org/CVERecord?id=CVE-2021-3621 https://nvd.nist.gov/vuln/detail/CVE-2021-3621
Parent vulnerabilities
(Appears in the following advisories)
Frequently Asked Questions
What is CVE-2021-3621?
CVE-2021-3621 is a vulnerability in SSSD where the sssctl command is vulnerable to shell command injection.
How does CVE-2021-3621 affect SSSD?
CVE-2021-3621 allows an attacker to trick the root user into running a specially crafted sssctl command to gain root access.
What is the severity of CVE-2021-3621?
CVE-2021-3621 has a severity rating of critical with a score of 8.8.
How can I fix CVE-2021-3621?
To fix CVE-2021-3621, update SSSD to version 2.6.0 or apply the recommended patch from Red Hat.
Where can I find more information about CVE-2021-3621?
You can find more information about CVE-2021-3621 in the release notes, Red Hat advisory, and Bugzilla report.
- collector/redhat-cve
- collector/nvd-index
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/remedy
- agent/references
- agent/severity
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-3621
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/event
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- package-manager/redhat
- vendor/sssd
- canonical/sssd sssd
- version/sssd sssd/2.6.0
- vendor/redhat
- canonical/redhat virtualization
- version/redhat virtualization/4.0
- canonical/redhat virtualization host
- version/redhat virtualization host/4.0
- canonical/redhat enterprise linux
- version/redhat enterprise linux/6.0
- version/redhat enterprise linux/7.0
- version/redhat enterprise linux/8.0
- canonical/redhat enterprise linux eus
- version/redhat enterprise linux eus/8.1
- version/redhat enterprise linux eus/8.2
- canonical/redhat enterprise linux server aus
- version/redhat enterprise linux server aus/8.2
- version/redhat enterprise linux server aus/8.4
- canonical/redhat enterprise linux server tus
- version/redhat enterprise linux server tus/8.2
- version/redhat enterprise linux server tus/8.4
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/34
- canonical/fedoraproject sssd
- version/fedoraproject sssd/2.6.0