VendorsFedora Projectsssd2.12.0
Vulnerabilities

Fedora Project SSSD 2.12.0

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

14CVEs
CVE-2026-104048
Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
Published 2026-10-06 · Analyzed
8.1EPSS 0.003
CVE-2026-104046
Sssd: sssd: denial of service via incomplete identity provider authentication requests
Published 2026-10-06 · Analyzed
6.2EPSS 0.002
CVE-2026-90995
Sssd: sssd: local denial of service due to null pointer dereference in pam responder
Published 2026-09-14 · Analyzed
5.5EPSS 0.001
CVE-2026-104039
Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder
Published 2026-10-06 · Analyzed
5.5EPSS 0.001
CVE-2026-88252
Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion
Published 2026-10-06 · Analyzed
5.5EPSS 0.001
CVE-2026-104029
Sssd: sssd: denial of service via out-of-bounds read in autofs responder
Published 2026-10-05 · Analyzed
5.5EPSS 0.001
CVE-2026-90996
Sssd: sssd: denial of service in nss responder via crafted zero-length requests
Published 2026-09-14 · Analyzed
5.5EPSS 0.001
CVE-2026-104030
Sssd: sssd: denial of service via out-of-bounds read during passkey parsing
Published 2026-10-05 · Analyzed
5.5EPSS 0.001
CVE-2026-104031
Sssd: sssd: denial of service via memory exhaustion in autofs responder
Published 2026-10-06 · Analyzed
5.5EPSS 0.001
CVE-2026-104032
Sssd: sssd: denial of service via unprivileged autofs cache invalidation
Published 2026-10-06 · Analyzed
5.5EPSS 0.001
CVE-2026-90462
Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
Published 2026-09-22 · Analyzed
5.4EPSS 0.002
CVE-2026-104047
Sssd: sssd: information disclosure via query injection in entra id lookups
Published 2026-10-06 · Analyzed
5.3EPSS 0.001
CVE-2026-104045
Sssd: sssd: denial of service via race condition in autofs responder
Published 2026-10-06 · Analyzed
4.7EPSS 0.001
CVE-2026-104040
Sssd: sssd: information disclosure via odata injection in entra id lookups
Published 2026-10-06 · Rejected
n/aEPSS 0.001