SS
Product
Sssd
36
CVEs
0
On KEV
8.8
Max CVSS
10
New 30D
Severity mix
Critical 0High 8Medium 18Low 1
Watch
Add Sssd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-4254 | 8.8 | Feb 1 | sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters Affected: 1.15.3 before 2.3.1 |
| CVE-2021-3621 | 8.8 | Dec 23 | A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands Affected: 2.6.0 |
| CVE-2012-3462 | 8.8 | Dec 26 | A flaw was found in SSSD version 1.9.0 Affected: 1.9.0 |
| CVE-2017-12173 | 8.8 | Jul 27 | It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection Affected: before 1.16.0 |
| CVE-2026-104048 | 8.1 | Oct 6 | Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation Affected: 2.12.0 |
| CVE-2018-10852 | 7.5 | Jun 26 | The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same… Affected: before 1.16.3 |
| CVE-2026-68743 | 7.1 | Aug 4 | Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1 Affected: All versions, or not specified |
| CVE-2023-3758 | 7.1 | Apr 18 | A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users Affected: before 2.9.5 |
Showing 8