4799 matches found
Astra Linux – Vulnerability in Firefox
DoS attack in the Libraries component in NSS. This vulnerability has been fixed in Firefox 149 and Thunderbird 149...
Astra Linux – Vulnerabilities in Firefox, NSS, Thunderbird
Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35...
Photon OS 5.0: Nss PHSA-2024-5.0-92-0342
An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-92-0342. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Nss PHSA-2024-5.0-91-0234
An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0234. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-68744
CVE-2026-68744 concerns the SSSD NSS responder. The function sss_nss_protocol_fill_initgr() pre-allocates reply space for all groups but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be sent to the client. This enables a local attacker to disclose cached ...
Linux Distros Unpatched Vulnerability : CVE-2026-68744
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the...
UBUNTU-CVE-2026-68742
A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and...
CVE-2026-68742
The CVE-2026-68742 entry concerns SSSD’s NSS responder. The root cause is that sss_nss_protocol_parse_addr() does not validate the addrlen field against the remaining packet size, enabling a crafted GETHOSTBYADDR request to trigger an out-of-bounds read and crash the process, causing denial of se...
EUVD-2026-52258
A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and...
Linux Distros Unpatched Vulnerability : CVE-2026-68742
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. ...
[SECURITY] [DSA 6403-1] nss security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6403-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2026 https://www.debian.org/security/faq -...
Linux Distros Unpatched Vulnerability : CVE-2026-16389
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-163...
ROOT-OS-DEBIAN-11-CVE-2026-6766 CVE-2026-6766 in rootio-nss - Patched by Root
Root has patched CVE-2026-6766 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-6767 CVE-2026-6767 in rootio-nss - Patched by Root
Root has patched CVE-2026-6767 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-6772 CVE-2026-6772 in rootio-nss - Patched by Root
Root has patched CVE-2026-6772 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-6135 CVE-2023-6135 in rootio-nss - Patched by Root
Root has patched CVE-2023-6135 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-5388 CVE-2023-5388 in rootio-nss - Patched by Root
Root has patched CVE-2023-5388 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...
CVE-2024-5300
The CVE concerns Canonical snapd’s base AppArmor profile misconfiguration. Abstraction rules in /etc/apparmor.d/abstractions/nss-systemd allow strictly confined snaps to access io.systemd.Multiplexer and io.systemd.NameServiceSwitch sockets in /run/systemd/userdb/, bypassing sandbox restrictions....
