Vulnerabilities

TI-2026-69019 CVE-2026-104045 · GHSA-8wp7-x59q-g576

Race condition in SSSD autofs responder enables denial of service

MEDIUM 55

A flaw was found in SSSD.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00125 Published 2026-10-06 Fix deferred CWE-772

TI-2026-69020 CVE-2026-104046 · GHSA-35vq-gvvv-mccw

SSSD IdP pre-authentication state leaks memory, enabling denial of service

LOW 27

A flaw was found in SSSD (System Security Services Daemon).

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0016 Published 2026-10-06 Fix deferred CWE-770

TI-2026-68594 CVE-2026-104048 · GHSA-474r-m56w-5qgh

Authorization bypass in SSSD HBAC rules via username collision

HIGH 70

A flaw was found in SSSD.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00301 Published 2026-10-06 Fix deferred CWE-1025

TI-2026-68593 CVE-2026-104047 · GHSA-g6q7-jchg-6v7f

Query injection in SSSD Entra ID lookups exposes directory data

LOW 23

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00131 Published 2026-10-06 Fix deferred CWE-140

TI-2026-68550 CVE-2026-88252 · GHSA-qj34-9w8c-jph5

Denial of service in sssd responder via connection retry loop

MEDIUM 58

A flaw was found in sssd.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00131 Published 2026-10-06 Fix deferred CWE-835

TI-2026-68280 CVE-2026-104039 · GHSA-6ffw-v8mm-gqgh

Expired pointer use in SSSD PAM responder enables denial of service

LOW 24

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00131 Published 2026-10-06 Fix deferred CWE-825

TI-2026-68273 CVE-2026-104032 · GHSA-9hff-39jv-57mx

Denial of service in SSSD via unprivileged autofs cache invalidation

MEDIUM 58

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00096 Published 2026-10-06 Fix deferred CWE-408

TI-2026-68272 CVE-2026-104031 · GHSA-p584-gvqg-45c6

Memory leak in SSSD autofs responder allows denial of service

LOW 23

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00096 Published 2026-10-06 Fix deferred CWE-772

TI-2026-67883 CVE-2026-104029 · GHSA-2chf-ff75-p482

Out-of-bounds read in SSSD autofs responder causes denial of service

LOW 24

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00129 Published 2026-10-05 Fix deferred CWE-125

TI-2026-67884 CVE-2026-104030 · GHSA-rwfv-xr9p-g8w4

Out-of-bounds read in SSSD passkey parsing causes denial of service

LOW 24

A flaw was found in sssd.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0012 Published 2026-10-05 Fix deferred CWE-125

TI-2026-65425 CVE-2026-102560 · GHSA-9v45-6jmj-gmwr

Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth

MEDIUM 49

A flaw was found in libsoup.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00521 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +4 CWE-125

TI-2026-65424 CVE-2026-102559 · GHSA-cj4p-f4hv-cp74

Libsoup: libsoup: heap buffer overflow during websocket client-frame masking

MEDIUM 44

A flaw was found in libsoup.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00625 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +9 CWE-125

TI-2026-65423 CVE-2026-102558 · GHSA-xxgh-qh6h-jxc2

Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth

MEDIUM 44

A flaw was found in libsoup.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00596 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +9 CWE-125

TI-2026-65420 CVE-2026-102555 · GHSA-vfxx-hcqj-vrh4

Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding

MEDIUM 42

A flaw was found in libsoup.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00479 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 CWE-125

TI-2026-65422 CVE-2026-102557 · GHSA-fc8r-xmg7-v58h

Libsoup: libsoup: heap buffer overflow during websocket message reassembly

MEDIUM 44

A flaw was found in libsoup.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00467 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +9 CWE-125

TI-2026-65421 CVE-2026-102556 · GHSA-q4x2-vf8m-46j5

Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

MEDIUM 44

A flaw was found in libsoup.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00467 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +9 CWE-843

TI-2026-61496 CVE-2026-90462 · GHSA-58vh-w7mf-682f

Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization

MEDIUM 58

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0018 Published 2026-09-22 Fix deferred CWE-280

TI-2026-61838 CVE-2026-90996 · GHSA-xg93-wm7f-rmcx

Sssd: sssd: denial of service in nss responder via crafted zero-length requests

LOW 24

A flaw was found in sssd.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00128 Published 2026-09-14 Fix deferred CWE-191

TI-2026-61837 CVE-2026-90995 · GHSA-q5vg-f923-829p

Sssd: sssd: local denial of service due to null pointer dereference in pam responder

LOW 24

A flaw was found in SSSD (System Security Services Daemon).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00135 Published 2026-09-14 Fix deferred CWE-476

TI-2026-49898 CVE-2026-71224 · GHSA-84xm-vrh2-jhxq

Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk

LOW 21

A stack overflow vulnerability was found in gfs2-utils.

CVSS 3.1MEDIUM 4.7 Local No auth User interaction EPSS 0.00143 Published 2026-09-03 Fix deferred CWE-770

TI-2026-49897 CVE-2026-71222 · GHSA-2cw6-9644-c5v7

Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing

LOW 27

A heap out-of-bounds read vulnerability was found in gfs2-utils.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.0011 Published 2026-09-03 Fix deferred CWE-125

TI-2026-49896 CVE-2026-71221 · GHSA-6q6f-22jw-g823

Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta

LOW 32

A stack out-of-bounds write vulnerability was found in gfs2-utils.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00134 Published 2026-09-03 No fix listed CWE-787

TI-2026-49895 CVE-2026-71220 · GHSA-959m-jjvx-c559

Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit

LOW 32

A stack out-of-bounds write vulnerability was found in gfs2-utils.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00134 Published 2026-09-03 No fix listed CWE-787

TI-2026-49894 CVE-2026-71219 · GHSA-5ggp-489g-rjqr

Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal

LOW 20

A stack overflow vulnerability was found in gfs2-utils.

CVSS 3.1MEDIUM 4.7 Local No auth User interaction EPSS 0.00115 Published 2026-09-03 Fix deferred CWE-770

TI-2026-56782 CVE-2026-82343 · GHSA-cj7r-2p4g-x2hx

Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling

LOW 26

A flaw was found in the file-psd plugin in GIMP.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00183 Published 2026-08-28 Fix deferred CWE-120

Vulnerabilities

Filters