Known Vulnerabilities for Sssd by Fedorahosted
Listed below are 2 of the newest known vulnerabilities associated with "Sssd" by "Fedorahosted".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-68744 json | A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all ... | Not Provided | 2026-08-04 | 2026-08-04 |
| CVE-2026-68743 json | A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length fiel... | Not Provided | 2026-08-04 | 2026-08-04 |
| CVE-2026-68742 json | A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field... | Not Provided | 2026-08-03 | 2026-08-03 |
| CVE-2026-19391 json | A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the liter... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-14476 json | A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. ... | Not Provided | 2026-07-07 | 2026-08-04 |
| CVE-2026-14474 json | A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searc... | Not Provided | 2026-07-07 | 2026-08-04 |
| CVE-2026-12610 json | A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulner... | Not Provided | 2026-06-30 | 2026-06-30 |
| CVE-2010-4341 json | Not Provided | 2011-01-25 | 2026-04-29 | |
| CVE-2009-2410 json | Not Provided | 2009-07-30 | 2026-04-23 |