kcmdump

KCM dumper Script rápido para volcar la base de datos KCM utilizada por SSSD y recuperar tickets de Kerberos en formato CCACHE. Inicialmente basado en SSSDKCMExtractor y KCMTicketFormatter. Descripción Desde la versión 2.0.0 2018-08-13, el almacenamiento backend del respondedor KCM de SSSD ya no...

Moderate: Red Hat Security Advisory: sssd security update

An update for sssd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

sssd: sssd: IdP authentication prefix comparison allows cross-user impersonation

A flaw was found in SSSD's IdP authentication provider. The evalaccesstokenbuf function compares the OIDC subject identifier using strncmp with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix...

EUVD-2026-94103

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

DEBIAN-CVE-2026-80048

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

CVE-2026-80048

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

CVE-2026-104045

A flaw was found in SSSD. A local user can trigger a Denial of Service...

UBUNTU-CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, s...

CVE-2026-104046

A flaw was found in SSSD System Security Services Daemon. When Ident...

UBUNTU-CVE-2026-80048

A flaw was found in sssd-kcm. A local user or process able to connec...

CVE-2026-88252

A flaw was found in sssd. A local user can cause a Denial of Service...

CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, s...

CVE-2026-80048

A flaw was found in sssd-kcm. A local user or process able to connec...

CVE-2026-104048

A flaw was found in SSSD. In trust-enabled identity management environ...

UBUNTU-CVE-2026-104045

A flaw was found in SSSD. A local user can trigger a Denial of Service...

UBUNTU-CVE-2026-104048

A flaw was found in SSSD. In trust-enabled identity management environ...

Linux Distros Unpatched Vulnerability : CVE-2026-104047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query...

UBUNTU-CVE-2026-104046

A flaw was found in SSSD System Security Services Daemon. When Ident...

Linux Distros Unpatched Vulnerability : CVE-2026-104048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers...

Linux Distros Unpatched Vulnerability : CVE-2026-104045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumerati...