| Bug | bookworm | trixie | sid | Description |
|---|
| CVE-2026-104048 | vulnerable | vulnerable | vulnerable | A flaw was found in SSSD. In trust-enabled identity management environ ... |
| CVE-2026-104047 | vulnerable | vulnerable | vulnerable | A flaw was found in SSSD. When configured to use Microsoft Entra ID, s ... |
| CVE-2026-104046 | vulnerable | vulnerable | vulnerable | A flaw was found in SSSD (System Security Services Daemon). When Ident ... |
| CVE-2026-104045 | vulnerable | vulnerable | vulnerable | A flaw was found in SSSD. A local user can trigger a Denial of Service ... |
| CVE-2026-104044 | vulnerable | vulnerable | vulnerable | A flaw was found in sssd. A local attacker can trigger a Denial of Ser ... |
| CVE-2026-104043 | vulnerable | vulnerable | vulnerable | A flaw was found in SSSD. A local attacker with access to the Name Ser ... |
| CVE-2026-104042 | vulnerable | vulnerable | vulnerable | A flaw was found in sssd. A local attacker can cause a Denial of Servi ... |
| CVE-2026-104041 | vulnerable | vulnerable | vulnerable | A flaw was found in SSSD. An unprivileged local user can repeatedly re ... |
| CVE-2026-104040 | vulnerable | vulnerable | vulnerable | A flaw was found in SSSD. When configured with the Entra ID identity p ... |
| CVE-2026-104039 | vulnerable | vulnerable | vulnerable | A flaw was found in SSSD. A local user can cause a denial of service ( ... |
| CVE-2026-104038 | vulnerable | vulnerable (no DSA) | vulnerable | A flaw was found in sssd. A remote attacker can cause a denial of serv ... |
| CVE-2026-104036 | vulnerable | vulnerable (no DSA) | vulnerable | A flaw was found in SSSD's NFS idmap plugin. When retrieving cached us ... |
| CVE-2026-104033 | vulnerable | vulnerable (no DSA) | vulnerable | A flaw was found in SSSD. When configured to enforce account expiratio ... |
| CVE-2026-104032 | vulnerable | vulnerable (no DSA) | vulnerable | A flaw was found in SSSD. An unprivileged local user can repeatedly re ... |
| CVE-2026-104031 | vulnerable | vulnerable (no DSA) | vulnerable | A flaw was found in SSSD. In configurations where the autofs responder ... |
| CVE-2026-92821 | vulnerable | vulnerable (no DSA) | vulnerable | A flaw was found in SSSD. When configured to evaluate password expirat ... |
| CVE-2026-90996 | vulnerable | vulnerable (no DSA) | vulnerable | A flaw was found in sssd. A local unprivileged user could send a speci ... |
| CVE-2026-90995 | vulnerable | vulnerable (no DSA) | vulnerable | A flaw was found in SSSD (System Security Services Daemon). A local at ... |
| CVE-2026-90994 | vulnerable | vulnerable (no DSA) | vulnerable | A flaw was found in sssd, specifically within the PAM (Pluggable Authe ... |
| CVE-2026-90463 | vulnerable | vulnerable (no DSA) | vulnerable | A flaw was found in the sssd NSS responder. This input validation vuln ... |
| CVE-2026-90462 | vulnerable | vulnerable (no DSA) | vulnerable | A flaw was found in SSSD. When configured with the LDAP access provide ... |
| CVE-2026-88252 | vulnerable | vulnerable (no DSA) | vulnerable | A flaw was found in sssd. A local user can cause a Denial of Service ( ... |
| CVE-2026-87853 | vulnerable | vulnerable (no DSA) | vulnerable | A flaw was found in SSSD's IdP authentication provider. The eval_acces ... |
| CVE-2026-80048 | vulnerable | vulnerable | vulnerable | A flaw was found in `sssd-kcm`. A local user or process able to connec ... |
| CVE-2026-68744 | vulnerable | vulnerable (no DSA) | fixed | A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function ... |
| CVE-2026-68743 | vulnerable | vulnerable (no DSA) | fixed | A flaw was found in SSSD. The extract_authtok_v1() function in the PAM ... |
| CVE-2026-68742 | vulnerable | vulnerable (no DSA) | fixed | A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function i ... |
| CVE-2026-14476 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_ ... |
| CVE-2026-14474 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_sear ... |
| CVE-2026-12610 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | A flaw was found in sssd. When authenticating with a YubiKey, the SSSD ... |
| CVE-2026-6245 | fixed | vulnerable (no DSA) | fixed | A flaw was found in the System Security Services Daemon (SSSD). The pa ... |
| CVE-2025-11561 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | A flaw was found in the integration of Active Directory and the System ... |
| Bug | Description |
|---|
| CVE-2023-3758 | A race condition flaw was found in sssd where the GPO policy is not co ... |
| CVE-2022-4254 | sssd: libsss_certmap fails to sanitise certificate data used in LDAP f ... |
| CVE-2021-3621 | A flaw was found in SSSD, where the sssctl command was vulnerable to s ... |
| CVE-2019-3811 | A vulnerability was found in sssd. If a user was configured with no ho ... |
| CVE-2018-16883 | sssd versions from 1.13.0 to before 2.0.0 did not properly restrict ac ... |
| CVE-2018-16838 | A flaw was found in sssd Group Policy Objects implementation. When the ... |
| CVE-2018-10852 | The UNIX pipe which sudo uses to contact SSSD and read the available s ... |
| CVE-2017-12173 | It was found that sssd's sysdb_search_user_by_upn_res() function befor ... |
| CVE-2015-5292 | Memory leak in the Privilege Attribute Certificate (PAC) responder plu ... |
| CVE-2014-0249 | The System Security Services Daemon (SSSD) 1.11.6 does not properly id ... |
| CVE-2013-0287 | The Simple Access Provider in System Security Services Daemon (SSSD) 1 ... |
| CVE-2013-0220 | The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomnt ... |
| CVE-2013-0219 | System Security Services Daemon (SSSD) before 1.9.4, when (1) creating ... |
| CVE-2012-3462 | A flaw was found in SSSD version 1.9.0. The SSSD's access-provider log ... |
| CVE-2011-1758 | The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in Sy ... |
| CVE-2010-4341 | The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in ... |
| CVE-2010-2940 | The auth_send function in providers/ldap/ldap_auth.c in System Securit ... |
| CVE-2010-0014 | System Security Services Daemon (SSSD) before 1.0.1, when the krb5 aut ... |
| CVE-2009-2410 | The local_handler_callback function in server/responder/pam/pam_LOCAL_ ... |