Vulnerabilities

TI-2026-69019 CVE-2026-104045 · GHSA-8wp7-x59q-g576

Race condition in SSSD autofs responder enables denial of service

MEDIUM 55

A flaw was found in SSSD.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00125 Published 2026-10-06 Fix deferred CWE-772

TI-2026-69020 CVE-2026-104046 · GHSA-35vq-gvvv-mccw

SSSD IdP pre-authentication state leaks memory, enabling denial of service

LOW 27

A flaw was found in SSSD (System Security Services Daemon).

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0016 Published 2026-10-06 Fix deferred CWE-770

TI-2026-68594 CVE-2026-104048 · GHSA-474r-m56w-5qgh

Authorization bypass in SSSD HBAC rules via username collision

HIGH 70

A flaw was found in SSSD.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00301 Published 2026-10-06 Fix deferred CWE-1025

TI-2026-68593 CVE-2026-104047 · GHSA-g6q7-jchg-6v7f

Query injection in SSSD Entra ID lookups exposes directory data

LOW 23

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00131 Published 2026-10-06 Fix deferred CWE-140

TI-2026-68550 CVE-2026-88252 · GHSA-qj34-9w8c-jph5

Denial of service in sssd responder via connection retry loop

MEDIUM 58

A flaw was found in sssd.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00131 Published 2026-10-06 Fix deferred CWE-835

TI-2026-68280 CVE-2026-104039 · GHSA-6ffw-v8mm-gqgh

Expired pointer use in SSSD PAM responder enables denial of service

LOW 24

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00131 Published 2026-10-06 Fix deferred CWE-825

TI-2026-68273 CVE-2026-104032 · GHSA-9hff-39jv-57mx

Denial of service in SSSD via unprivileged autofs cache invalidation

MEDIUM 58

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00096 Published 2026-10-06 Fix deferred CWE-408

TI-2026-68272 CVE-2026-104031 · GHSA-p584-gvqg-45c6

Memory leak in SSSD autofs responder allows denial of service

LOW 23

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00096 Published 2026-10-06 Fix deferred CWE-772

TI-2026-67883 CVE-2026-104029 · GHSA-2chf-ff75-p482

Out-of-bounds read in SSSD autofs responder causes denial of service

LOW 24

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00129 Published 2026-10-05 Fix deferred CWE-125

TI-2026-67884 CVE-2026-104030 · GHSA-rwfv-xr9p-g8w4

Out-of-bounds read in SSSD passkey parsing causes denial of service

LOW 24

A flaw was found in sssd.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0012 Published 2026-10-05 Fix deferred CWE-125

TI-2026-61496 CVE-2026-90462 · GHSA-58vh-w7mf-682f

Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization

MEDIUM 58

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0018 Published 2026-09-22 Fix deferred CWE-280

TI-2026-61838 CVE-2026-90996 · GHSA-xg93-wm7f-rmcx

Sssd: sssd: denial of service in nss responder via crafted zero-length requests

LOW 24

A flaw was found in sssd.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00128 Published 2026-09-14 Fix deferred CWE-191

TI-2026-61837 CVE-2026-90995 · GHSA-q5vg-f923-829p

Sssd: sssd: local denial of service due to null pointer dereference in pam responder

LOW 24

A flaw was found in SSSD (System Security Services Daemon).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00135 Published 2026-09-14 Fix deferred CWE-476

TI-2026-48329 CVE-2026-68743 · GHSA-3v6f-w66g-3mv6

Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1

LOW 30

A flaw was found in SSSD.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00133 Published 2026-08-04 Fix deferred CWE-125

TI-2026-48330 CVE-2026-68744 · GHSA-xxfg-88q3-gxgm

Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply

LOW 15

A flaw was found in SSSD.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00133 Published 2026-08-04 Fix deferred CWE-908

TI-2026-48328 CVE-2026-68742 · GHSA-pwm5-x9cm-2ppf

Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr

LOW 24

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0013 Published 2026-08-03 Fix deferred CWE-125

TI-2026-10808 CVE-2026-12610 · GHSA-f953-7679-xc38

Sssd: use-after-free crash in sssd' 'sssd_pam' process

LOW 29

A flaw was found in sssd.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00121 Published 2026-06-30 No fix listed CWE-825

TI-2026-05478 CVE-2026-6245 · GHSA-g672-w7xh-qp9j

Sssd: out-of-bounds read in the sssd

LOW 24

A flaw was found in the System Security Services Daemon (SSSD).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00135 Published 2026-04-15 Fix deferred CWE-805

TI-2023-03511 CVE-2023-3758 · GHSA-7pwr-cfrc-px4f

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

LOW 35

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users.

CVSS 3.1HIGH 7.1 Adjacent network Low privileges No interaction EPSS 0.01041 Published 2024-04-18 Partial fix · 2.9.5, 2.9.4-3.el8_10 +5 CWE-362

TI-2022-03895 CVE-2022-4254 · GHSA-x75f-4m4h-6374

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

HIGH 73

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0095 Published 2023-02-01 Fixed CWE-90

TI-2021-02567 CVE-2021-3621 · GHSA-g527-g4q2-57xc

Command injection in sssd

MEDIUM 43

A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02648 Published 2021-12-23 Partial fix CWE-77

TI-2012-02990 CVE-2012-3462 · GHSA-h73j-5p58-29r6

Improper authentication in sssd

MEDIUM 41

A flaw was found in SSSD version 1.9.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01608 Published 2019-12-26 No fix listed CWE-287

TI-2018-12048 CVE-2018-16838 · GHSA-h2vj-4wwx-54q4

Improper access control in [UNKNOWN] sssd

LOW 27

A flaw was found in sssd Group Policy Objects implementation.

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.01157 Published 2019-03-25 Fixed CWE-284

TI-2019-02823 CVE-2019-3811 · GHSA-x3cx-wjrx-m7rj

Information disclosure in sssd

LOW 25

A vulnerability was found in sssd.

CVSS 3.1MEDIUM 5.2 Adjacent network Low privileges User interaction EPSS 0.00702 Published 2019-01-15 Partial fix CWE-200

TI-2018-12093 CVE-2018-16883 · GHSA-4qf7-r2vx-jf49

Information disclosure in [UNKNOWN] sssd

LOW 25

sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00385 Published 2018-12-19 Fix deferred CWE-200

Vulnerabilities

Filters