Known Vulnerabilities for Sssd by Fedorahosted
Listed below are 2 of the newest known vulnerabilities associated with "Sssd" by "Fedorahosted".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-90996 json | A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Net... | Not Provided | 2026-09-14 | 2026-09-16 |
| CVE-2026-90995 json | A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable... | Not Provided | 2026-09-14 | 2026-09-15 |
| CVE-2026-90994 json | A flaw was found in sssd, specifically within the PAM (Pluggable Authentication Modules) responder's protocol v1 parser, pam_... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-90463 json | A flaw was found in the sssd NSS responder. This input validation vulnerability allows a local attacker, by sending specially... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-90462 json | A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `locko... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-87853 json | A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identi... | Not Provided | 2026-09-09 | 2026-09-10 |
| CVE-2026-68744 json | A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all ... | Not Provided | 2026-08-04 | 2026-08-31 |
| CVE-2026-68743 json | A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length fiel... | Not Provided | 2026-08-04 | 2026-08-31 |
| CVE-2026-68742 json | A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field... | Not Provided | 2026-08-03 | 2026-08-31 |
| CVE-2026-19391 json | A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the liter... | Not Provided | 2026-08-11 | 2026-08-11 |