Fedoraproject Sssd vulnerabilities

• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: denial of service via race condition in autofs responder CVE-2026-104045 4.7 MediumOctober 6, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: denial of service via incomplete identity provider authentication requests CVE-2026-104046 6.2 MediumOctober 6, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation CVE-2026-104048 6.8 MediumOctober 6, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: information disclosure via query injection in entra id lookups CVE-2026-104047 5.3 MediumOctober 6, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion CVE-2026-88252 4.7 MediumOctober 6, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder CVE-2026-104039 4.7 MediumOctober 6, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: denial of service via unprivileged autofs cache invalidation CVE-2026-104032 5.5 MediumOctober 6, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: denial of service via memory exhaustion in autofs responder CVE-2026-104031 5.5 MediumOctober 6, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: denial of service via out-of-bounds read in autofs responder CVE-2026-104029 3.3 LowOctober 5, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: denial of service via out-of-bounds read during passkey parsing CVE-2026-104030 5.5 MediumOctober 5, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization CVE-2026-90462 5.4 MediumSeptember 22, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: denial of service in nss responder via crafted zero-length requests CVE-2026-90996 4.0 MediumSeptember 14, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: local denial of service due to null pointer dereference in pam responder CVE-2026-90995 5.5 MediumSeptember 14, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1 CVE-2026-68743 Fix available 5.5 MediumAugust 4, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply CVE-2026-68744 Fix available 3.3 LowAugust 4, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr CVE-2026-68742 Fix available 5.5 MediumAugust 3, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +8 more +10 more Sssd: use-after-free crash in sssd' 'sssd_pam' process CVE-2026-12610 Fix available 6.4 MediumJune 30, 2026
• fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more Sssd: out-of-bounds read in the sssd CVE-2026-6245 Fix available 5.5 MediumApril 15, 2026
• fedoraproject sssd, fedora, red hat enterprise linux 6 +29 more +31 more Sssd: race condition during authorization leads to gpo policies functioning inconsistently CVE-2023-3758 Fix available 7.1 HighApril 18, 2024
• fedoraproject sssd, redhat enterprise linux, enterprise linux desktop +10 more +12 more sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters CVE-2022-4254 Fix available 8.8 HighJanuary 27, 2023
• fedoraproject sssd, fedora, redhat enterprise linux +5 more +7 more A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via... CVE-2021-3621 Fix available 8.8 HighAugust 16, 2021
• fedoraproject sssd A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the... CVE-2012-3462 Fix available 8.8 HighDecember 26, 2019
• [unknown] sssd, redhat enterprise linux +1 more A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by... CVE-2018-16838 Fix available 5.4 MediumMarch 25, 2019
• fedoraproject sssd, debian linux, fedoraproject fedora +2 more +4 more A vulnerability was found in sssd. If a user was configured with no home directory set, sssd... CVE-2019-3811 Fix available 4.1 MediumJanuary 15, 2019
• [unknown] sssd sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe... CVE-2018-16883 Fix available 2.5 LowDecember 19, 2018
• [unknown] sssd, debian linux, redhat enterprise linux desktop +2 more +4 more The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too... CVE-2018-10852 Fix available 3.8 LowJune 26, 2018
• fedoraproject sssd, redhat enterprise linux desktop, enterprise linux server +3 more +5 more It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize... CVE-2017-12173 Fix available 4.3 MediumOctober 5, 2017
• fedoraproject sssd Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in... CVE-2015-5292 Fix available 6.8 MediumOctober 29, 2015
• fedoraproject sssd, redhat enterprise linux +1 more The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership... CVE-2014-0249 Fix available 3.3 LowJune 11, 2014
• fedoraproject sssd The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when... CVE-2013-0287 Fix available 4.9 MediumMarch 21, 2013
• fedoraproject sssd The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in... CVE-2013-0220 Fix available 5.0 MediumFebruary 24, 2013
• fedoraproject sssd, redhat enterprise linux +1 more System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3)... CVE-2013-0219 Fix available 3.7 LowFebruary 24, 2013
• fedoraproject sssd The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services... CVE-2011-1758 3.7 LowMay 26, 2011
• fedorahosted sssd The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD... CVE-2010-4341 Fix available 2.1 LowJanuary 25, 2011
• fedoraproject sssd The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1... CVE-2010-2940 Fix available 5.1 MediumAugust 30, 2010
• fedoraproject sssd System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured... CVE-2010-0014 Fix available 3.7 LowJanuary 14, 2010