4793 matches found
CVE-2026-68744
CVE-2026-68744 concerns the SSSD NSS responder. The function sss_nss_protocol_fill_initgr() pre-allocates reply space for all groups but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be sent to the client. This enables a local attacker to disclose cached ...
CVE-2026-68742
The CVE-2026-68742 entry concerns SSSD’s NSS responder. The root cause is that sss_nss_protocol_parse_addr() does not validate the addrlen field against the remaining packet size, enabling a crafted GETHOSTBYADDR request to trigger an out-of-bounds read and crash the process, causing denial of se...
EUVD-2026-52258
A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and...
Linux Distros Unpatched Vulnerability : CVE-2026-68742
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. ...
Linux Distros Unpatched Vulnerability : CVE-2026-16389
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-163...
ROOT-OS-DEBIAN-11-CVE-2026-6766 CVE-2026-6766 in rootio-nss - Patched by Root
Root has patched CVE-2026-6766 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-6772 CVE-2026-6772 in rootio-nss - Patched by Root
Root has patched CVE-2026-6772 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-6767 CVE-2026-6767 in rootio-nss - Patched by Root
Root has patched CVE-2026-6767 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-6135 CVE-2023-6135 in rootio-nss - Patched by Root
Root has patched CVE-2023-6135 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-5388 CVE-2023-5388 in rootio-nss - Patched by Root
Root has patched CVE-2023-5388 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...
CVE-2024-5300
The CVE concerns Canonical snapd’s base AppArmor profile misconfiguration. Abstraction rules in /etc/apparmor.d/abstractions/nss-systemd allow strictly confined snaps to access io.systemd.Multiplexer and io.systemd.NameServiceSwitch sockets in /run/systemd/userdb/, bypassing sandbox restrictions....
CVE-2026-16389
Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
EUVD-2026-46226
Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153...
OESA-2026-3032 cifs-utils security update
The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. Security Fixes: A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled...
OESA-2026-3028 cifs-utils security update
The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. Security Fixes: A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled...
Amazon Linux 2023 : cifs-utils, cifs-utils-devel, cifs-utils-info (ALAS2023-2026-1927)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1927 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks...
cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall
A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted requestkey payload to trick the root-own...
ROOT-OS-DEBIAN-12-CVE-2026-6772 CVE-2026-6772 in rootio-nss - Patched by Root
Root has patched CVE-2026-6772 in the rootio-nss package for Root:Debian:12. Multiple fixed versions available...