SS
Product
Sssd
32
CVEs
0
On KEV
8.8
Max CVSS
6
New 30D
Severity mix
Critical 0High 8Medium 14Low 1
Watch
Add Sssd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12610 | 6.4 | Jun 30 | Sssd: use-after-free crash in sssd' 'sssd_pam' process Affected: All versions, or not specified |
| CVE-2026-104046 | 6.2 | Oct 6 | Sssd: sssd: denial of service via incomplete identity provider authentication requests Affected: 2.12.0 |
| CVE-2026-104040 | 6.1 | Oct 6 | Sssd: sssd: information disclosure via odata injection in entra id lookups Affected: 2.12.0 |
| CVE-2026-88252 | 5.5 | Oct 6 | Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion Affected: 2.12.0 |
| CVE-2026-90996 | 5.5 | Sep 14 | Sssd: sssd: denial of service in nss responder via crafted zero-length requests Affected: 2.12.0 |
| CVE-2026-90995 | 5.5 | Sep 14 | Sssd: sssd: local denial of service due to null pointer dereference in pam responder Affected: 2.12.0 |
| CVE-2026-68742 | 5.5 | Aug 3 | Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr Affected: All versions, or not specified |
| CVE-2026-6245 | 5.5 | Apr 15 | Sssd: out-of-bounds read in the sssd Affected: All versions, or not specified |
| CVE-2018-16883 | 5.5 | Dec 19 | sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter Affected: 1.13.0 before 2.0.0 |
| CVE-2026-90462 | 5.4 | Sep 22 | Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization Affected: 2.12.0 |
| CVE-2018-16838 | 5.4 | Mar 25 | A flaw was found in sssd Group Policy Objects implementation Affected: All versions, or not specified |
| CVE-2026-104047 | 5.3 | Oct 6 | Sssd: sssd: information disclosure via query injection in entra id lookups Affected: 2.12.0 |
| CVE-2019-3811 | 5.2 | Jan 15 | A vulnerability was found in sssd Affected: before 2.1 |
| CVE-2026-104045 | 4.7 | Oct 6 | Sssd: sssd: denial of service via race condition in autofs responder Affected: 2.12.0 |
Showing 14
