Fedoraproject
Fedoraproject Sssd: vulnerabilidades y CVE
Fedoraproject Sssd tiene 23 vulnerabilidades publicadas, 5 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE23
Últimos 12 meses5
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-68743 | Alta (7.1) | 0.13% | — | 4 ago 2026 | A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length field against the remaining buffer size before processing. A local attacker can exploit this via a… |
| CVE-2026-68744 | Baja (3.3) | 0.13% | — | 4 ago 2026 | A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized… |
| CVE-2026-68742 | Media (5.5) | 0.13% | — | 3 ago 2026 | A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted… |
| CVE-2026-12610 | Media (6.4) | 0.12% | — | 30 jun 2026 | A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this… |
| CVE-2026-6245 | Media (5.5) | 0.15% | — | 15 abr 2026 | A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is… |
| CVE-2023-3758 | Alta (7.1) | 1.0% | — | 18 abr 2024 | A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately. |
| CVE-2022-4254 | Alta (8.8) | 0.95% | — | 1 feb 2023 | sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters |
| CVE-2021-3621 | Alta (8.8) | 2.5% | — | 23 dic 2021 | A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially… |
| CVE-2012-3462 | Alta (8.8) | 1.6% | — | 26 dic 2019 | A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's SELinux… |
| CVE-2018-16838 | Media (5.4) | 1.1% | — | 25 mar 2019 | A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of… |
| CVE-2019-3811 | Media (5.2) | 0.70% | — | 15 ene 2019 | A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that… |
| CVE-2018-16883 | Media (5.5) | 0.38% | — | 19 dic 2018 | sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitive information were stored in the user directory, this could… |
| CVE-2017-12173 | Alta (8.8) | 1.5% | — | 27 jul 2018 | It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login environment, if a password… |
| CVE-2018-10852 | Alta (7.5) | 1.5% | — | 26 jun 2018 | The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can… |
| CVE-2015-5292 | Media (6.8) | 3.7% | — | 29 oct 2015 | Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote authenticated users to cause a denial of service… |
| CVE-2014-0249 | Baja (3.3) | 0.34% | — | 11 jun 2014 | The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified… |
| CVE-2013-0287 | Media (4.9) | 2.2% | — | 21 mar 2013 | The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote… |
| CVE-2013-0220 | Media (5) | 3.3% | — | 24 feb 2013 | The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security… |
| CVE-2013-0219 | Baja (3.7) | 0.37% | — | 24 feb 2013 | System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on… |
| CVE-2011-1758 | Baja (3.7) | 0.34% | — | 26 may 2011 | The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname… |
| CVE-2010-4341 | Baja (2.1) | 0.49% | — | 25 ene 2011 | The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a… |
| CVE-2010-2940 | Media (5.1) | 2.0% | — | 30 ago 2010 | The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication… |
| CVE-2010-0014 | Baja (3.7) | 0.69% | — | 14 ene 2010 | System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the… |