CVE-2022-4254

High (8.8). EPSS 0.9% chance of exploitation in the next 30 days.

EPSS

0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)

CWE

CWE-90

Published

2023-02-01

Modified

2026-06-17

Record from

the NVD, synced 2026-10-19

Affected

• fedoraproject:sssd
• redhat:enterprise_linux
• redhat:enterprise_linux_desktop
• redhat:enterprise_linux_for_ibm_z_systems
• redhat:enterprise_linux_for_power_big_endian
• redhat:enterprise_linux_for_power_little_endian
• redhat:enterprise_linux_for_scientific_computing
• redhat:enterprise_linux_server
• redhat:enterprise_linux_server_aus
• redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
• redhat:enterprise_linux_server_tus
• redhat:enterprise_linux_server_update_services_for_sap_solutions
• redhat:enterprise_linux_workstation

References

• https://access.redhat.com/security/cve/CVE-2022-4254
• https://bugzilla.redhat.com/show_bug.cgi?id=2149894
• https://github.com/SSSD/sssd/commit/a2b9a84460429181f2a4fa7e2bb5ab49fd561274
• https://github.com/SSSD/sssd/issues/5135
• https://lists.debian.org/debian-lts-announce/2023/05/msg00028.html

Check your stackJSON