4960 matches found
CVE-2026-68744 Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply
A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to...
Important: cifs-utils
Issue Overview: A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted requestkey payload to...
Linux Distros Unpatched Vulnerability : CVE-2026-68744
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the...
Amazon Linux 2023 : cifs-utils, cifs-utils-devel, cifs-utils-info (ALAS2023-2026-2030)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2030 advisory. A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low...
CVE-2026-68742
A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and...
UBUNTU-CVE-2026-68742
A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and...
CVE-2026-68742
The CVE-2026-68742 entry concerns SSSD’s NSS responder. The root cause is that sss_nss_protocol_parse_addr() does not validate the addrlen field against the remaining packet size, enabling a crafted GETHOSTBYADDR request to trigger an out-of-bounds read and crash the process, causing denial of se...
EUVD-2026-52258
A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and...
CVE-2026-68742 Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and...
Linux Distros Unpatched Vulnerability : CVE-2026-68742
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. ...
CVE-2026-68742: Out-of-bounds Read
A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and...
WordPress Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin <= 5.0.9 - Authenticated (Subscriber+) SQL Injection vulnerability
Authenticated Subscriber+ SQL Injection vulnerability discovered by NOn Nss in WordPress Plugin Taskbuilder versions = 5.0.9...
[SECURITY] [DSA 6403-1] nss security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6403-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2026 https://www.debian.org/security/faq -...
Linux Distros Unpatched Vulnerability : CVE-2026-16389
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-163...
ROOT-OS-DEBIAN-11-CVE-2026-6766 CVE-2026-6766 in rootio-nss - Patched by Root
Root has patched CVE-2026-6766 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-6772 CVE-2026-6772 in rootio-nss - Patched by Root
Root has patched CVE-2026-6772 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-6767 CVE-2026-6767 in rootio-nss - Patched by Root
Root has patched CVE-2026-6767 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...
Debian dla-4694 : libnss3 - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4694 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4694-1 [email protected]...
CVE-2024-5300
The CVE concerns Canonical snapd’s base AppArmor profile misconfiguration. Abstraction rules in /etc/apparmor.d/abstractions/nss-systemd allow strictly confined snaps to access io.systemd.Multiplexer and io.systemd.NameServiceSwitch sockets in /run/systemd/userdb/, bypassing sandbox restrictions....
