SS
Product
Sssd
32
CVEs
0
On KEV
8.8
Max CVSS
6
New 30D
Severity mix
Critical 0High 8Medium 14Low 1
Watch
Add Sssd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-4254 | 8.8 | Feb 1 | sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters Affected: 1.15.3 before 2.3.1 |
| CVE-2021-3621 | 8.8 | Dec 23 | A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands Affected: 2.6.0 |
| CVE-2012-3462 | 8.8 | Dec 26 | A flaw was found in SSSD version 1.9.0 Affected: 1.9.0 |
| CVE-2017-12173 | 8.8 | Jul 27 | It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection Affected: before 1.16.0 |
| CVE-2026-104048 | 8.1 | Oct 6 | Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation Affected: 2.12.0 |
| CVE-2018-10852 | 7.5 | Jun 26 | The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same… Affected: before 1.16.3 |
| CVE-2026-68743 | 7.1 | Aug 4 | Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1 Affected: All versions, or not specified |
| CVE-2023-3758 | 7.1 | Apr 18 | A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users Affected: before 2.9.5 |
| CVE-2026-12610 | 6.4 | Jun 30 | Sssd: use-after-free crash in sssd' 'sssd_pam' process Affected: All versions, or not specified |
| CVE-2026-104046 | 6.2 | Oct 6 | Sssd: sssd: denial of service via incomplete identity provider authentication requests Affected: 2.12.0 |
| CVE-2026-104040 | 6.1 | Oct 6 | Sssd: sssd: information disclosure via odata injection in entra id lookups Affected: 2.12.0 |
| CVE-2026-88252 | 5.5 | Oct 6 | Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion Affected: 2.12.0 |
| CVE-2026-90996 | 5.5 | Sep 14 | Sssd: sssd: denial of service in nss responder via crafted zero-length requests Affected: 2.12.0 |
| CVE-2026-90995 | 5.5 | Sep 14 | Sssd: sssd: local denial of service due to null pointer dereference in pam responder Affected: 2.12.0 |
| CVE-2026-68742 | 5.5 | Aug 3 | Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr Affected: All versions, or not specified |
| CVE-2026-6245 | 5.5 | Apr 15 | Sssd: out-of-bounds read in the sssd Affected: All versions, or not specified |
| CVE-2018-16883 | 5.5 | Dec 19 | sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter Affected: 1.13.0 before 2.0.0 |
| CVE-2026-90462 | 5.4 | Sep 22 | Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization Affected: 2.12.0 |
| CVE-2018-16838 | 5.4 | Mar 25 | A flaw was found in sssd Group Policy Objects implementation Affected: All versions, or not specified |
| CVE-2026-104047 | 5.3 | Oct 6 | Sssd: sssd: information disclosure via query injection in entra id lookups Affected: 2.12.0 |
| CVE-2019-3811 | 5.2 | Jan 15 | A vulnerability was found in sssd Affected: before 2.1 |
| CVE-2026-104045 | 4.7 | Oct 6 | Sssd: sssd: denial of service via race condition in autofs responder Affected: 2.12.0 |
| CVE-2026-68744 | 3.3 | Aug 4 | Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply Affected: All versions, or not specified |
| CVE-2015-5292 | – | Oct 29 | Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote… Affected: 1.10.0; 1.10.1; 1.11.0; 1.11.1; 1.11.2; 1.11.3; +11 more |
| CVE-2014-0249 | – | Jun 11 | The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to… Affected: 1.11.6 |
| CVE-2013-0287 | – | Mar 21 | The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the… Affected: 1.9.0; 1.9.1; 1.9.2; 1.9.3; 1.9.4 |
| CVE-2013-0220 | – | Feb 24 | The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in… Affected: through 1.9.3; 0.2.1; 0.3.0; 0.3.1; 0.3.2; 0.3.3; +34 more |
| CVE-2013-0219 | – | Feb 24 | System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete… Affected: through 1.9.3; 0.2.1; 0.3.0; 0.3.1; 0.3.2; 0.3.3; +34 more |
| CVE-2011-1758 | – | May 26 | The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline… Affected: 1.5.0; 1.5.1; 1.5.2; 1.5.3; 1.5.4; 1.5.5; +2 more |
| CVE-2010-4341 | – | Jan 25 | The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite… Affected: 1.3.0; 1.5.0 |
| CVE-2010-2940 | – | Aug 30 | The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote… Affected: 1.3.0 |
| CVE-2010-0014 | – | Jan 14 | System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate,… Affected: through 1.0.0; 0.2.1; 0.3.0; 0.3.1; 0.3.2; 0.3.3; +9 more |
Showing 32