Every CVE Search/ Get API key

CVE-2026-14476

Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass

8.0 HighFix available

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.67%Unchanged since Jul 7, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.0

Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.

Record
CVE-2026-14476
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-23
Updated
2026-11-05
EUVDEUVD-2026-42023 8.0

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.

Record
EUVD-2026-42023
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-05
GitHub AdvisoriesGHSA-v6qh-pm8g-3c5w 8.0

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components()...

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.

Record
GHSA-v6qh-pm8g-3c5w
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-23
Updated
2026-11-02
NVD 8.0

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.

Record
CVE-2026-14476
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-23
Updated
2026-11-05
OSVDEBIAN-CVE-2026-14476 8.0

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.

Record
DEBIAN-CVE-2026-14476
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-07
OSVOESA-2026-3019 8.0

sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.

Security Fix(es):

A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.(CVE-2026-12610)

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.(CVE-2026-14476)

Record
OESA-2026-3019
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
Show 36 moreShow less
OSVOESA-2026-3020 8.0

sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.

Security Fix(es):

A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.(CVE-2026-12610)

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.(CVE-2026-14476)

Record
OESA-2026-3020
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3021 8.0

sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.

Security Fix(es):

A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.(CVE-2026-12610)

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.(CVE-2026-14476)

Record
OESA-2026-3021
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3147 8.0

sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.

Security Fix(es):

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.(CVE-2026-14476)

Record
OESA-2026-3147
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3148 8.0

sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.

Security Fix(es):

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.(CVE-2026-14476)

Record
OESA-2026-3148
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:41937 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2026:41937
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:42122 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2026:42122
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:46482 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2026:46482
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:46990 8.8

Red Hat Security Advisory: sssd security, bug fix, and enhancement update

Record
RHSA-2026:46990
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:49839 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2026:49839
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:49840 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2026:49840
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:49841 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2026:49841
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:49842 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2026:49842
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:49843 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2026:49843
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:49844 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2026:49844
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:50109 8.8

Red Hat Security Advisory: sssd security update

Record
RHSA-2026:50109
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:41937 8.8

Important: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (CVE-2026-14474)

  • sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (CVE-2026-14476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:41937
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:42122 8.8

Important: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (CVE-2026-14474)

  • sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (CVE-2026-14476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:42122
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:46990 8.8

Important: sssd security, bug fix, and enhancement update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (CVE-2026-14474)

  • sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (CVE-2026-14476)

Bug Fix(es) and Enhancement(s):

  • sss_override does not work on AD UPN [rhel-8.10.z] (JIRA:Rocky Linux-168363)

  • [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] (JIRA:Rocky Linux-168415)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:46990
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-14476 8.0

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.

Record
UBUNTU-CVE-2026-14476
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:41937 No score

Important: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (CVE-2026-14474)
  • sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (CVE-2026-14476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:41937
Updated
2026-11-02
OSVALSA-2026:42122 No score

Important: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (CVE-2026-14474)
  • sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (CVE-2026-14476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:42122
Updated
2026-11-02
OSVALSA-2026:46990 No score

Important: sssd security, bug fix, and enhancement update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (CVE-2026-14474)
  • sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (CVE-2026-14476)

Bug Fix(es) and Enhancement(s):

  • sss_override does not work on AD UPN [almalinux-8.10.z] (JIRA:AlmaLinux-168363)
  • [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [almalinux-8.10.z] (JIRA:AlmaLinux-168415)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:46990
Updated
2026-11-02
OSVCLSA-2026-1784804056 No score

sssd: Fix of 2 CVEs

  • CVE-2026-14476: reject path traversal in the AD GPO gPCFileSysPath attribute, preventing writes outside the GPO cache directory
  • CVE-2026-14474: warn when ldap_sudo_search_base is unset and the sudo provider falls back to searching the entire directory tree for sudoRole objects
Record
CLSA-2026-1784804056
Updated
2026-11-02
OSVCLSA-2026-1785345275 No score

sssd: Fix of 2 CVEs

  • CVE-2026-14474: warn when ldap_sudo_search_base falls back to the root DN, where the whole directory tree is searched for injectable sudoRole objects
  • CVE-2026-14476: reject ".." path traversal in the AD GPO gPCFileSysPath attribute to prevent writing files outside the GPO cache directory
Record
CLSA-2026-1785345275
Updated
2026-11-02
OSVCLSA-2026-1785845028 No score

sssd: Fix of 2 CVEs

  • CVE-2026-14474: warn when ldap_sudo_search_base falls back to the directory root DN
  • CVE-2026-14476: reject path traversal in gPCFileSysPath to prevent escaping the GPO cache directory
Record
CLSA-2026-1785845028
Updated
2026-11-02
OSVCLSA-2026-1788433999 No score

sssd: Fix of CVE-2023-3758

  • CVE-2026-14474: warn when ldap_sudo_search_base falls back to the directory root DN
  • CVE-2026-14476: reject path traversal in gPCFileSysPath to prevent escaping the GPO cache directory
Record
CLSA-2026-1788433999
Updated
2026-11-02
OSVopenSUSE-SU-2026:21290-1 No score

Security update for sssd

This update for sssd fixes the following issues

  • CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709).
  • CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (bsc#1270708).
Record
openSUSE-SU-2026:21290-1
Updated
2026-11-02
OSVSUSE-SU-2026:22591-1 No score

Security update for sssd

This update for sssd fixes the following issues

  • CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709).
  • CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (bsc#1270708).
Record
SUSE-SU-2026:22591-1
Updated
2026-11-02
OSVSUSE-SU-2026:22621-1 No score

Security update for sssd

This update for sssd fixes the following issues

  • CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709).
  • CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (bsc#1270708).
Record
SUSE-SU-2026:22621-1
Updated
2026-11-02
OSVSUSE-SU-2026:22799-1 No score

Security update for sssd

This update for sssd fixes the following issues

  • CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709).
  • CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (bsc#1270708).
Record
SUSE-SU-2026:22799-1
Updated
2026-11-02
OSVSUSE-SU-2026:22897-1 No score

Security update for sssd

This update for sssd fixes the following issues

  • CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709).
  • CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (bsc#1270708).
Record
SUSE-SU-2026:22897-1
Updated
2026-11-02
OSVSUSE-SU-2026:3025-1 No score

Security update for sssd

This update for sssd fixes the following issues

  • CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709).
  • CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (bsc#1270708).
Record
SUSE-SU-2026:3025-1
Updated
2026-11-02
OSVSUSE-SU-2026:3041-1 No score

Security update for sssd

This update for sssd fixes the following issues

  • CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709).
  • CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (bsc#1270708).
Record
SUSE-SU-2026:3041-1
Updated
2026-11-02
OSVSUSE-SU-2026:3131-1 No score

Security update for sssd

This update for sssd fixes the following issues

  • CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709).
  • CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (bsc#1270708).
Record
SUSE-SU-2026:3131-1
Updated
2026-11-02
OSVSUSE-SU-2026:3139-1 No score

Security update for sssd

This update for sssd fixes the following issues

  • CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709).
  • CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (bsc#1270708).
Record
SUSE-SU-2026:3139-1
Updated
2026-11-02
OSVSUSE-SU-2026:3195-1 No score

Security update for sssd

This update for sssd fixes the following issues

  • CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709).
  • CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass (bsc#1270708).
Record
SUSE-SU-2026:3195-1
Updated
2026-11-02

Affected products

Show 15 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
libipa_hbac
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
libsss_autofs
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
libsss_certmap
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
libsss_idmap
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
libsss_nss_idmap
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
libsss_nss_idmap-devel
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
libsss_sudo
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
python3-libipa_hbac
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
python3-libsss_nss_idmap
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
python3-sss
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
python3-sss-murmur
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
python3-sssdconfig
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-ad
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-client
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-common
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-common-pac
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-dbus
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-idp
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-ipa
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-kcm
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-krb5
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-krb5-common
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-ldap
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-nfs-idmap
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-passkey
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-proxy
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-tools
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
sssd-winbind-idmap
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.0-3.el10_2.1
2.12.0-3.el10_2.1
libipa_hbac
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
libsss_autofs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
libsss_certmap
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
libsss_idmap
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
libsss_nss_idmap
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
libsss_simpleifp
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
libsss_sudo
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
python3-libipa_hbac
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
python3-libsss_nss_idmap
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
python3-sss
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
python3-sss-murmur
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
python3-sssdconfig
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
sssd
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
sssd-ad
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
sssd-client
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
sssd-common
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
sssd-common-pac
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
sssd-dbus
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
sssd-ipa
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
sssd-kcm
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
sssd-krb5
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
sssd-krb5-common
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
sssd-ldap
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
sssd-nfs-idmap
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
sssd-proxy
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.8-4.el9_8.1
2.9.8-4.el9_8.1
libipa_hbac
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
libsss_autofs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
libsss_certmap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
libsss_idmap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
libsss_nss_idmap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
libsss_nss_idmap-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
libsss_simpleifp
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
libsss_sudo
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
python3-libipa_hbac
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
python3-libsss_nss_idmap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
python3-sss
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
python3-sss-murmur
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
python3-sssdconfig
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-ad
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-client
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-common
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-common-pac
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-dbus
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-idp
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-ipa
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-kcm
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-krb5
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-krb5-common
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-ldap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-nfs-idmap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-polkit-rules
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-proxy
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-tools
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
sssd-winbind-idmap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.4-5.el8_10.5
2.9.4-5.el8_10.5
libipa_hbac
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
libipa_hbac-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
libsss_autofs
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
libsss_certmap
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
libsss_certmap-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
libsss_idmap
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
libsss_idmap-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
libsss_nss_idmap
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
libsss_nss_idmap-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
libsss_simpleifp
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
libsss_simpleifp-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
libsss_sudo
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
python3-libipa_hbac
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
python3-libsss_nss_idmap
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
python3-sss
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
python3-sss-murmur
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
python3-sssdconfig
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-ad
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-client
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-common
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-common-pac
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-dbus
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-idp
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-ipa
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-kcm
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-krb5
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-krb5-common
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-ldap
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-nfs-idmap
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-polkit-rules
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-proxy
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
sssd-winbind-idmap
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.8.2-3.el9_2.alma.tuxcare.els3
2.8.2-3.el9_2.alma.tuxcare.els3
libipa_hbac
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
libipa_hbac-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
libsss_autofs
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
libsss_certmap
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
libsss_certmap-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
libsss_idmap
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
libsss_idmap-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
libsss_nss_idmap
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
libsss_nss_idmap-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
libsss_simpleifp
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
libsss_simpleifp-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
libsss_sudo
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
python3-libipa_hbac
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
python3-libsss_nss_idmap
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
python3-sss
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
python3-sss-murmur
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
python3-sssdconfig
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-ad
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-client
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-common
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-common-pac
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-dbus
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-idp
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-ipa
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-kcm
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-krb5
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-krb5-common
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-ldap
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-nfs-idmap
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-passkey
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-polkit-rules
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-proxy
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-tools
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
sssd-winbind-idmap
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.9.6-4.el9_6.2.tuxcare.els2
2.9.6-4.el9_6.2.tuxcare.els2
libipa_hbac
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
libipa_hbac-devel
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
libsss_autofs
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
libsss_certmap
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
libsss_certmap-devel
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
libsss_idmap
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
libsss_idmap-devel
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
libsss_nss_idmap
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
libsss_nss_idmap-devel
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
libsss_simpleifp
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
libsss_simpleifp-devel
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
libsss_sudo
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
python-libipa_hbac
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
python-libsss_nss_idmap
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
python-sss
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
python-sss-murmur
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
python-sssdconfig
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
sssd
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
sssd-ad
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 1.16.5-10.0.3.el7_9.16.tuxcare.els2
1.16.5-10.0.3.el7_9.16.tuxcare.els2
sssd
Debian:12
 All versions, plus listed versions
2.10.1-12.10.1-22.11.1-12.11.1-22.11.1-2.1
Show 22 moreShow less
2.12.0-12.12.0-22.12.0-3~exp02.12.0-42.13.1-12.13.1-22.13.1-32.13.1-42.8.2-42.8.2-4+deb12u12.9.1-12.9.1-22.9.2-12.9.4-12.9.4-1.12.9.4-1.1~exp12.9.4-22.9.5-12.9.5-22.9.5-32.9.5-42.9.5-5
 None known
sssd
Debian:13
 All versions, plus listed versions
2.10.1-22.11.1-12.11.1-22.11.1-2.12.12.0-1
Show 7 moreShow less
2.12.0-22.12.0-3~exp02.12.0-42.13.1-12.13.1-22.13.1-32.13.1-4
 None known
sssd
Debian:14
 before 2.13.1-1, plus listed versions
2.10.1-22.11.1-12.11.1-22.11.1-2.12.12.0-12.12.0-22.12.0-3~exp02.12.0-4
2.13.1-1
sssd
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 2.9.4-21.oe2403sp1
2.9.4-21.oe2403sp1
sssd
openEuler:24.03-LTS-SP3
From an advisory covering 2 CVEs
 before 2.9.4-21.oe2403sp3
2.9.4-21.oe2403sp3
sssd
openEuler:24.03-LTS-SP4
From an advisory covering 2 CVEs
 before 2.9.4-22.oe2403sp4
2.9.4-22.oe2403sp4
sssd
openEuler:20.03-LTS-SP4
 before 2.2.2-26.oe2003sp4
2.2.2-26.oe2003sp4
sssd
openEuler:22.03-LTS-SP4
 before 2.6.1-26.oe2203sp4
2.6.1-26.oe2203sp4
libipa_hbac-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
libsss_autofs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
libsss_certmap-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
libsss_idmap-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
libsss_nss_idmap-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
libsss_sudo-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
python3-libipa_hbac-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
python3-libsss_nss_idmap-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
python3-sss-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
python3-sss-murmur-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-ad-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-client-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-common-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-common-pac-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-dbus-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-idp
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-idp-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-ipa-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-kcm-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-krb5-common-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-krb5-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-ldap-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-nfs-idmap-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-passkey-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-proxy-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-tools-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-winbind-idmap-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
libipa_hbac
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
libsss_autofs
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
libsss_certmap
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
libsss_idmap
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
libsss_nss_idmap
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
libsss_sudo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
python3-libipa_hbac
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
python3-libsss_nss_idmap
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
python3-sss
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
python3-sss-murmur
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
python3-sssdconfig
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-ad
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-client
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-common
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-common-pac
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-dbus
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-ipa
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-kcm
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-krb5
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-krb5-common
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-ldap
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-nfs-idmap
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-passkey
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-proxy
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-tools
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd-winbind-idmap
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
libsss_nss_idmap-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
libipa_hbac-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
libsss_autofs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
libsss_certmap-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
libsss_idmap-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
libsss_nss_idmap-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
libsss_simpleifp-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
libsss_sudo-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
python3-libipa_hbac-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
python3-libsss_nss_idmap-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
python3-sss-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
python3-sss-murmur-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-ad-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-client-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-common-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-common-pac-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-dbus-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-idp
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-idp-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-ipa-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-kcm-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-krb5-common-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-krb5-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-ldap-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-nfs-idmap-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-passkey-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-proxy-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd-winbind-idmap-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:2.12.0-3.el10_2.1
0:2.12.0-3.el10_2.1
sssd
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:2.9.8-4.el9_8.1
0:2.9.8-4.el9_8.1
sssd
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.9.4-5.el8_10.5
0:2.9.4-5.el8_10.5
sssd
SUSE:Linux Micro 6.2
From an advisory covering 2 CVEs
 before 2.10.2-160000.3.1
2.10.2-160000.3.1
sssd
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 2.10.2-160000.3.1
2.10.2-160000.3.1
sssd
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 2.10.2-160000.3.1
2.10.2-160000.3.1
sssd
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 2.8.2-8.1
2.8.2-8.1
sssd
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 2.9.5-slfo.1.1_5.1
2.9.5-slfo.1.1_5.1
sssd
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 2 CVEs
 before 2.10.2-150600.3.53.1
2.10.2-150600.3.53.1
sssd
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 2 CVEs
 before 2.10.2-150600.3.53.1
2.10.2-150600.3.53.1
sssd
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 2.10.2-150700.9.34.1
2.10.2-150700.9.34.1
sssd
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 2 CVEs
 before 1.16.1-7.73.1
1.16.1-7.73.1
sssd
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 2 CVEs
 before 1.16.1-7.73.1
1.16.1-7.73.1
sssd
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 2.5.2-150400.4.45.1
2.5.2-150400.4.45.1
sssd
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 2.5.2-150400.4.45.1
2.5.2-150400.4.45.1
sssd
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 2.5.2-150400.4.45.1
2.5.2-150400.4.45.1
sssd
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 2.5.2-150400.4.45.1
2.5.2-150400.4.45.1
sssd
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 2.5.2-150400.4.45.1
2.5.2-150400.4.45.1
sssd
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 2.5.2-150400.4.45.1
2.5.2-150400.4.45.1
sssd
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 2.5.2-150500.10.44.1
2.5.2-150500.10.44.1
sssd
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 2.5.2-150500.10.44.1
2.5.2-150500.10.44.1
sssd
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 2.5.2-150500.10.44.1
2.5.2-150500.10.44.1
sssd
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 2.5.2-150500.10.44.1
2.5.2-150500.10.44.1
sssd
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 2.5.2-150500.10.44.1
2.5.2-150500.10.44.1
sssd
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.12.5-21.13.1-21.13.2-11.13.3-11.13.4-1
Show 15 moreShow less
1.13.4-1ubuntu11.13.4-1ubuntu1.11.13.4-1ubuntu1.21.13.4-1ubuntu1.51.13.4-1ubuntu1.61.13.4-1ubuntu1.71.13.4-1ubuntu1.81.13.4-1ubuntu1.91.13.4-1ubuntu1.101.13.4-1ubuntu1.111.13.4-1ubuntu1.121.13.4-1ubuntu1.131.13.4-1ubuntu1.141.13.4-1ubuntu1.151.13.4-1ubuntu1.15+esm1
 None known
sssd
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.15.3-2ubuntu11.15.3-3ubuntu11.16.0-5ubuntu11.16.0-5ubuntu21.16.1-1ubuntu1
Show 9 moreShow less
1.16.1-1ubuntu1.11.16.1-1ubuntu1.21.16.1-1ubuntu1.31.16.1-1ubuntu1.41.16.1-1ubuntu1.51.16.1-1ubuntu1.61.16.1-1ubuntu1.71.16.1-1ubuntu1.81.16.1-1ubuntu1.8+esm1
 None known
sssd
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.2.0-4ubuntu12.2.2-12.2.2-1ubuntu12.2.3-1.1ubuntu12.2.3-2
Show 14 moreShow less
2.2.3-32.2.3-3ubuntu0.12.2.3-3ubuntu0.22.2.3-3ubuntu0.32.2.3-3ubuntu0.42.2.3-3ubuntu0.62.2.3-3ubuntu0.72.2.3-3ubuntu0.82.2.3-3ubuntu0.92.2.3-3ubuntu0.102.2.3-3ubuntu0.112.2.3-3ubuntu0.122.2.3-3ubuntu0.132.2.3-3ubuntu0.13+esm1
 None known
sssd
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.4.1-2ubuntu42.5.2-4ubuntu12.5.2-4ubuntu32.5.2-4ubuntu42.6.1-1ubuntu3
Show 9 moreShow less
2.6.3-1ubuntu32.6.3-1ubuntu3.12.6.3-1ubuntu3.22.6.3-1ubuntu3.32.6.3-1ubuntu3.42.6.3-1ubuntu3.52.6.3-1ubuntu3.62.6.3-1ubuntu3.82.6.3-1ubuntu3.9
 None known
sssd
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.9.1-2ubuntu22.9.1-2ubuntu32.9.2-1ubuntu22.9.4-1ubuntu12.9.4-1.1ubuntu3
Show 10 moreShow less
2.9.4-1.1ubuntu52.9.4-1.1ubuntu62.9.4-1.1ubuntu6.12.9.4-1.1ubuntu6.22.9.4-1.1ubuntu6.32.9.4-1.1ubuntu6.42.9.4-1.1ubuntu6.52.9.4-1.1ubuntu6.62.9.4-1.1ubuntu6.72.9.4-1.1ubuntu6.8
 None known
sssd
Ubuntu:25.10
 All versions, plus listed versions
2.10.1-2ubuntu42.10.1-2ubuntu52.10.1-2ubuntu5.12.10.1-2ubuntu5.22.10.1-2ubuntu5.3
 None known
sssd
Ubuntu:26.10
 All versions, plus listed versions
2.12.0-1ubuntu52.12.0-4ubuntu12.12.0-4ubuntu22.12.0-4ubuntu32.12.0-4ubuntu4
 None known
sssd
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.10.1-2ubuntu52.10.1-2ubuntu72.12.0-1ubuntu32.12.0-1ubuntu42.12.0-1ubuntu5
Show 5 moreShow less
2.12.0-1ubuntu5.12.12.0-1ubuntu5.22.12.0-1ubuntu5.32.12.0-1ubuntu5.42.12.0-1ubuntu5.5
 None known
sssd
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 2.10.2-160000.3.1
2.10.2-160000.3.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedEUVD, NVD
factsCVE List
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-14476 is a high vulnerability (CVSS 8.0) in Red Hat Enterprise Linux 10, published July 7, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.67%, the 52nd percentile. Fixed in sssd 2.13.1-1.

References

Show 73 moreShow less
This page doesn't list everything

Left out here: 1,030 package rows. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open