Sssd (Fedoraproject) - vulnerabilities (CVEs)

36 CVEs, 10 in the last 30 days, 163 known versions, newest CVE from 2026-10-06. Vendor: Fedoraproject.

CVEs of Sssd

CVE-2026-104045 - CVSS 4.7 (medium), 2026-10-06: A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous…
CVE-2026-104046 - CVSS 6.2 (medium), 2026-10-06: A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state…
CVE-2026-104048 - CVSS 8.1 (high), 2026-10-06: A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain…
CVE-2026-104047 - CVSS 5.3 (medium), 2026-10-06: A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query…
CVE-2026-88252 - CVSS 5.5 (medium), 2026-10-06: A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system handles…
CVE-2026-104040 - CVSS 6.1 (medium), 2026-10-06: A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before…
CVE-2026-104032 - CVSS 5.5 (medium), 2026-10-06: A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing…
CVE-2026-104031 - CVSS 5.5 (medium), 2026-10-06: A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not…
CVE-2026-104029 - CVSS 5.5 (medium), 2026-10-05: A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to…
CVE-2026-104030 - CVSS 5.5 (medium), 2026-10-05: A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication…
CVE-2026-90462 - CVSS 5.4 (medium), 2026-09-22: A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `lockout`, a fail-open condition in the…
CVE-2026-90996 - CVSS 5.5 (medium), 2026-09-14: A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network Security Services (NSS)…
CVE-2026-90995 - CVSS 5.5 (medium), 2026-09-14: A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable Authentication Modules)…
CVE-2026-68743 - CVSS 7.1 (high), 2026-08-04: A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length field against the remaining buffer…
CVE-2026-68744 - CVSS 3.3 (low), 2026-08-04: A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all group entries but does not shrink…
CVE-2026-68742 - CVSS 5.5 (medium), 2026-08-03: A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet…
CVE-2026-12610 - CVSS 6.4 (medium), 2026-06-30: A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer…
CVE-2026-6245 - CVSS 5.5 (medium), 2026-04-15: A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly…
CVE-2023-3758 - CVSS 7.1 (high), 2024-04-18: A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization…
CVE-2022-4254 - CVSS 8.8 (high), 2023-02-01: sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVE-2021-3621 - CVSS 8.8 (high), 2021-12-23: A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows…
CVE-2012-3462 - CVSS 8.8 (high), 2019-12-26: A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the…
CVE-2018-16838 - CVSS 5.4 (medium), 2019-03-25: A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side,…
CVE-2019-3811 - CVSS 5.2 (medium), 2019-01-15: A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty…
CVE-2018-16883 - CVSS 5.5 (medium), 2018-12-19: sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If…
CVE-2017-12173 - CVSS 8.8 (high), 2018-07-27: It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to…
CVE-2018-10852 - CVSS 7.5 (high), 2018-06-26: The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a…
CVE-2015-5292 - CVSS 6.8 (medium), 2015-10-29: Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1…
CVE-2014-0249 - CVSS 3.3 (low), 2014-06-11: The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which…
CVE-2013-0287 - CVSS 4.9 (medium), 2013-03-21: The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly…
CVE-2013-0220 - CVSS 5 (medium), 2013-02-24: The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request…
CVE-2013-0219 - CVSS 3.7 (low), 2013-02-24: System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create,…
CVE-2011-1758 - CVSS 3.7 (low), 2011-05-26: The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal…
CVE-2010-4341 - CVSS 2.1 (low), 2011-01-25: The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of…
CVE-2010-2940 - CVSS 5.1 (medium), 2010-08-30: The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled,…
CVE-2010-0014 - CVSS 3.7 (low), 2010-01-14: System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured but the KDC is unreachable, allows physically proximate…