Fedoraproject Sssd
36 CVEs affecting Fedoraproject Sssd. Latest disclosed: 2026-10-06. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4254 | High | 8.8 | 2023-02-01 | sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters |
CVE-2021-3621 | High | 8.8 | 2021-12-23 | A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows… |
CVE-2012-3462 | High | 8.8 | 2019-12-26 | A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the acce… |
CVE-2023-3758 | High | 7.1 | 2024-04-18 | A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issue… |
CVE-2026-104048 | Medium | 6.8 | 2026-10-06 | A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifie… |
CVE-2026-12610 | Medium | 6.4 | 2026-06-30 | A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is… |
CVE-2026-104046 | Medium | 6.2 | 2026-10-06 | A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in… |
CVE-2026-104032 | Medium | 5.5 | 2026-10-06 | A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorizat… |
CVE-2026-104031 | Medium | 5.5 | 2026-10-06 | A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not release… |
CVE-2026-104030 | Medium | 5.5 | 2026-10-05 | A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication to… |
CVE-2026-90995 | Medium | 5.5 | 2026-09-14 | A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable Authentication Modules) responder… |
CVE-2026-68743 | Medium | 5.5 | 2026-08-04 | A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length field against the remaining buffer siz… |
CVE-2026-68742 | Medium | 5.5 | 2026-08-03 | A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body… |
CVE-2026-6245 | Medium | 5.5 | 2026-04-15 | A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly h… |
CVE-2026-90462 | Medium | 5.4 | 2026-09-22 | A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `lockout`, a fail-open condition in the… |
CVE-2018-16838 | Medium | 5.4 | 2019-03-25 | A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side… |
CVE-2026-104047 | Medium | 5.3 | 2026-10-06 | A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query fi… |
CVE-2019-3811 | Medium | 5.2 | 2019-01-15 | A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty str… |
CVE-2026-104045 | Medium | 4.7 | 2026-10-06 | A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumer… |
CVE-2026-88252 | Medium | 4.7 | 2026-10-06 | A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system handles use… |