1595 matches found
kcmdump
KCM dumper Quick script to dump the KCM database used by SSSD and recover Kerberos tickets in the CCACHE format. Initially based on SSSDKCMExtractor and KCMTicketFormatter. Description Since version 2.0.0 2018-08-13, the back end storage of the KCM responder of SSSD does not encrypt the database...
Moderate: Red Hat Security Advisory: sssd security update
An update for sssd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
sssd: sssd: IdP authentication prefix comparison allows cross-user impersonation
A flaw was found in SSSD's IdP authentication provider. The evalaccesstokenbuf function compares the OIDC subject identifier using strncmp with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix...
EUVD-2026-94103
A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...
DEBIAN-CVE-2026-80048
A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...
CVE-2026-80048
A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...
CVE-2026-104045
A flaw was found in SSSD. A local user can trigger a Denial of Service...
UBUNTU-CVE-2026-104046
A flaw was found in SSSD System Security Services Daemon. When Ident...
CVE-2026-104046
A flaw was found in SSSD System Security Services Daemon. When Ident...
UBUNTU-CVE-2026-80048
A flaw was found in sssd-kcm. A local user or process able to connec...
UBUNTU-CVE-2026-104048
A flaw was found in SSSD. In trust-enabled identity management environ...
Linux Distros Unpatched Vulnerability : CVE-2026-104045
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumerati...
Linux Distros Unpatched Vulnerability : CVE-2026-80048
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request...
CVE-2026-88252
A flaw was found in sssd. A local user can cause a Denial of Service...
UBUNTU-CVE-2026-104045
A flaw was found in SSSD. A local user can trigger a Denial of Service...
CVE-2026-104047
A flaw was found in SSSD. When configured to use Microsoft Entra ID, s...
CVE-2026-80048
A flaw was found in sssd-kcm. A local user or process able to connec...
CVE-2026-104048
A flaw was found in SSSD. In trust-enabled identity management environ...