CVE-2021-3621

libsss_certmap: The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories a...

CVE-2021-3621 is fixed in 45 products on 1 platform, first by libipa-hbac0 1.16.1-1ubuntu1.8, released August 15, 2021. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.8
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0265
85th percentile

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Security Fix(es): * sssd: shell command injection in sssctl (CVE-2021-3621) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
libipa-hbac0 · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 libipa-hbac0 1.16.1-1ubuntu1.8 Aug 15, 2021
libipa-hbac0 · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 libipa-hbac0 2.2.3-3ubuntu0.7 Aug 15, 2021
libipa-hbac0 · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 libipa-hbac0 2.4.1-2ubuntu4 Aug 15, 2021
libipa_hbac · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
libipa_hbac · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
libnss-sss · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 libnss-sss 1.16.1-1ubuntu1.8 Aug 15, 2021
libnss-sss · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 libnss-sss 2.2.3-3ubuntu0.7 Aug 15, 2021
libnss-sss · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 libnss-sss 2.4.1-2ubuntu4 Aug 15, 2021
libpam-sss · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 libpam-sss 1.16.1-1ubuntu1.8 Aug 15, 2021
libpam-sss · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 libpam-sss 2.2.3-3ubuntu0.7 Aug 15, 2021
libpam-sss · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 libpam-sss 2.4.1-2ubuntu4 Aug 15, 2021
libsss-certmap0 · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 libsss-certmap0 1.16.1-1ubuntu1.8 Aug 15, 2021
libsss-certmap0 · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 libsss-certmap0 2.2.3-3ubuntu0.7 Aug 15, 2021
libsss-certmap0 · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 libsss-certmap0 2.4.1-2ubuntu4 Aug 15, 2021
libsss-idmap0 · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 libsss-idmap0 1.16.1-1ubuntu1.8 Aug 15, 2021
libsss-idmap0 · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 libsss-idmap0 2.2.3-3ubuntu0.7 Aug 15, 2021
libsss-idmap0 · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 libsss-idmap0 2.4.1-2ubuntu4 Aug 15, 2021
libsss-nss-idmap0 · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 libsss-nss-idmap0 1.16.1-1ubuntu1.8 Aug 15, 2021
libsss-nss-idmap0 · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 libsss-nss-idmap0 2.2.3-3ubuntu0.7 Aug 15, 2021
libsss-nss-idmap0 · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 libsss-nss-idmap0 2.4.1-2ubuntu4 Aug 15, 2021
libsss-simpleifp0 · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 libsss-simpleifp0 1.16.1-1ubuntu1.8 Aug 15, 2021
libsss-simpleifp0 · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 libsss-simpleifp0 2.2.3-3ubuntu0.7 Aug 15, 2021
libsss-simpleifp0 · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 libsss-simpleifp0 2.4.1-2ubuntu4 Aug 15, 2021
libsss-sudo · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 libsss-sudo 1.16.1-1ubuntu1.8 Aug 15, 2021
libsss-sudo · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 libsss-sudo 2.2.3-3ubuntu0.7 Aug 15, 2021
libsss-sudo · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 libsss-sudo 2.4.1-2ubuntu4 Aug 15, 2021
libsss_autofs · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
libsss_autofs · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
libsss_certmap · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
libsss_certmap · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
libsss_idmap · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
libsss_idmap · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
libsss_nss_idmap · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
libsss_nss_idmap · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
libsss_nss_idmap-devel · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
libsss_nss_idmap-devel · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
libsss_simpleifp · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
libsss_simpleifp · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
libsss_sudo · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
libsss_sudo · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
libwbclient-sssd · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 libwbclient-sssd 1.16.1-1ubuntu1.8 Aug 15, 2021
libwbclient-sssd · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 libwbclient-sssd 2.2.3-3ubuntu0.7 Aug 15, 2021
libwbclient-sssd · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 libwbclient-sssd 2.4.1-2ubuntu4 Aug 15, 2021
python-libipa-hbac · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 python-libipa-hbac 1.16.1-1ubuntu1.8 Aug 15, 2021
python-libsss-nss-idmap · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 python-libsss-nss-idmap 1.16.1-1ubuntu1.8 Aug 15, 2021
python-sss · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 python-sss 1.16.1-1ubuntu1.8 Aug 15, 2021
python3-libipa-hbac · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 python3-libipa-hbac 1.16.1-1ubuntu1.8 Aug 15, 2021
python3-libipa-hbac · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 python3-libipa-hbac 2.2.3-3ubuntu0.7 Aug 15, 2021
python3-libipa-hbac · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 python3-libipa-hbac 2.4.1-2ubuntu4 Aug 15, 2021
python3-libipa_hbac · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
python3-libipa_hbac · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
python3-libsss-nss-idmap · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 python3-libsss-nss-idmap 1.16.1-1ubuntu1.8 Aug 15, 2021
python3-libsss-nss-idmap · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 python3-libsss-nss-idmap 2.2.3-3ubuntu0.7 Aug 15, 2021
python3-libsss-nss-idmap · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 python3-libsss-nss-idmap 2.4.1-2ubuntu4 Aug 15, 2021
python3-libsss_nss_idmap · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
python3-libsss_nss_idmap · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
python3-sss · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
python3-sss · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 python3-sss 1.16.1-1ubuntu1.8 Aug 15, 2021
python3-sss · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 python3-sss 2.2.3-3ubuntu0.7 Aug 15, 2021
python3-sss · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 python3-sss 2.4.1-2ubuntu4 Aug 15, 2021
python3-sss · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
python3-sss-murmur · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
python3-sss-murmur · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
python3-sssdconfig · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
python3-sssdconfig · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd · Debian 11.6 (bullseye) 2.4.1-2+deb11u1 DLA-4047-1 Feb 9, 2025
sssd · Debian 12.15 (bookworm) 2.5.2-1 DEBIAN-CVE-2021-3621 Dec 23, 2021
sssd · Debian 13.5 (trixie) 2.5.2-1 DEBIAN-CVE-2021-3621 Dec 23, 2021
sssd · Debian 14 2.5.2-1 DEBIAN-CVE-2021-3621 Dec 23, 2021
sssd · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 sssd 1.16.1-1ubuntu1.8 Aug 15, 2021
sssd · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 sssd 2.2.3-3ubuntu0.7 Aug 15, 2021
sssd · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 sssd 2.4.1-2ubuntu4 Aug 15, 2021
sssd · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-ad · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-ad · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 sssd-ad 1.16.1-1ubuntu1.8 Aug 15, 2021
sssd-ad · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 sssd-ad 2.2.3-3ubuntu0.7 Aug 15, 2021
sssd-ad · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 sssd-ad 2.4.1-2ubuntu4 Aug 15, 2021
sssd-ad · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-ad-common · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 sssd-ad-common 1.16.1-1ubuntu1.8 Aug 15, 2021
sssd-ad-common · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 sssd-ad-common 2.2.3-3ubuntu0.7 Aug 15, 2021
sssd-ad-common · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 sssd-ad-common 2.4.1-2ubuntu4 Aug 15, 2021
sssd-client · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-client · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-common · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-common · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 sssd-common 1.16.1-1ubuntu1.8 Aug 15, 2021
sssd-common · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 sssd-common 2.2.3-3ubuntu0.7 Aug 15, 2021
sssd-common · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 sssd-common 2.4.1-2ubuntu4 Aug 15, 2021
sssd-common · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-common-pac · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-common-pac · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-dbus · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-dbus · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 sssd-dbus 1.16.1-1ubuntu1.8 Aug 15, 2021
sssd-dbus · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 sssd-dbus 2.2.3-3ubuntu0.7 Aug 15, 2021
sssd-dbus · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 sssd-dbus 2.4.1-2ubuntu4 Aug 15, 2021
sssd-dbus · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-ipa · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-ipa · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 sssd-ipa 1.16.1-1ubuntu1.8 Aug 15, 2021
sssd-ipa · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 sssd-ipa 2.2.3-3ubuntu0.7 Aug 15, 2021
sssd-ipa · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 sssd-ipa 2.4.1-2ubuntu4 Aug 15, 2021
sssd-ipa · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-kcm · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-kcm · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 sssd-kcm 1.16.1-1ubuntu1.8 Aug 15, 2021
sssd-kcm · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 sssd-kcm 2.2.3-3ubuntu0.7 Aug 15, 2021
sssd-kcm · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 sssd-kcm 2.4.1-2ubuntu4 Aug 15, 2021
sssd-kcm · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-krb5 · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-krb5 · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 sssd-krb5 1.16.1-1ubuntu1.8 Aug 15, 2021
sssd-krb5 · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 sssd-krb5 2.2.3-3ubuntu0.7 Aug 15, 2021
sssd-krb5 · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 sssd-krb5 2.4.1-2ubuntu4 Aug 15, 2021
sssd-krb5 · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-krb5-common · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-krb5-common · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 sssd-krb5-common 1.16.1-1ubuntu1.8 Aug 15, 2021
sssd-krb5-common · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 sssd-krb5-common 2.2.3-3ubuntu0.7 Aug 15, 2021
sssd-krb5-common · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 sssd-krb5-common 2.4.1-2ubuntu4 Aug 15, 2021
sssd-krb5-common · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-ldap · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-ldap · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 sssd-ldap 1.16.1-1ubuntu1.8 Aug 15, 2021
sssd-ldap · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 sssd-ldap 2.2.3-3ubuntu0.7 Aug 15, 2021
sssd-ldap · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 sssd-ldap 2.4.1-2ubuntu4 Aug 15, 2021
sssd-ldap · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-libwbclient · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-libwbclient · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-nfs-idmap · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-nfs-idmap · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-polkit-rules · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-polkit-rules · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-proxy · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-proxy · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 sssd-proxy 1.16.1-1ubuntu1.8 Aug 15, 2021
sssd-proxy · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 sssd-proxy 2.2.3-3ubuntu0.7 Aug 15, 2021
sssd-proxy · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 sssd-proxy 2.4.1-2ubuntu4 Aug 15, 2021
sssd-proxy · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-tools · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-tools · Ubuntu 18.04.6 LTS (bionic) 1.16.1-1ubuntu1.8 sssd-tools 1.16.1-1ubuntu1.8 Aug 15, 2021
sssd-tools · Ubuntu 20.04 LTS (focal) 2.2.3-3ubuntu0.7 sssd-tools 2.2.3-3ubuntu0.7 Aug 15, 2021
sssd-tools · Ubuntu 22.04.1 LTS (jammy) 2.4.1-2ubuntu4 sssd-tools 2.4.1-2ubuntu4 Aug 15, 2021
sssd-tools · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021
sssd-winbind-idmap · RHEL 8 0:2.4.0-9.el8_4.2 RHSA-2021:3151 Aug 16, 2021
sssd-winbind-idmap · ol 8 0:2.4.0-9.0.1.el8_4.2 ELSA-2021-3151 Aug 17, 2021

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.