Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in System Security Services Daemon (SSSD) ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
SSSD ist ein System-Daemon. Seine Hauptfunktion besteht darin, den Zugang zu entfernten Identitäts- und Authentifizierungs-Ressourcen durch ein Framework bereitzustellen.
Vulnerabilities 3
-
Medium 5.5
Sssd: sssd: local denial of service due to null pointer dereference in pam responder
A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable Authentication Modules) responder socket can send a specially crafted protocol request. If the `pam_app_services` configuration is en…
-
Medium 4.0
Sssd: sssd: denial of service via malformed pam v1 requests
A flaw was found in sssd, specifically within the PAM (Pluggable Authentication Modules) responder's protocol v1 parser, pam_parse_in_data(). A local client with access to the PAM responder's UNIX socket can exploit this by negotiating protocol v1 and sending…
-
Medium 4.0
Sssd: sssd: denial of service in nss responder via crafted zero-length requests
A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network Security Services (NSS) responder. This could lead to a denial-of-service condition, causing the NSS responder to become unstable…
Revision history
-
#2
Neue Updates von SUSE aufgenommen
-
#1
Initiale Fassung
References
-
EU Vulnerability Database vom 2026-09-14
https://euvd.enisa.europa.eu/enisa/EUVD-2026-77588
-
EU Vulnerability Database vom 2026-09-14
https://euvd.enisa.europa.eu/enisa/EUVD-2026-77589
-
EU Vulnerability Database vom 2026-09-14
https://euvd.enisa.europa.eu/enisa/EUVD-2026-77590
-
GitHub Security Advisory vom 2026-09-14
https://github.com/advisories/GHSA-M9PJ-QP75-2H63
-
GitHub Security Advisory vom 2026-09-14
https://github.com/advisories/GHSA-Q5VG-F923-829P
-
GitHub Security Advisory vom 2026-09-14
https://github.com/advisories/GHSA-XG93-WM7F-RMCX
-
SUSE Security Update SUSE-SU-2026:5079-1 vom 2026-11-03
https://lists.suse.com/pipermail/sle-security-updates/2026-November/030379.html