CVE-2026-68742

EUVD-2026-52258
A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 0.56%
Affected Products (NVD)
VendorProductVersion
fedoraprojectsssd
-
redhatopenshift_container_platform
4.0
redhatenterprise_linux
7.0
redhatenterprise_linux
8.0
redhatenterprise_linux
9.0
redhatenterprise_linux
10.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
sssd
bookworm
vulnerable
sid
2.13.1-3
fixed
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sssd
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libipa_hbac-devel
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libipa_hbac0
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_certmap-devel
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_certmap0
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_idmap-devel
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_idmap0
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_nss_idmap-devel
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_nss_idmap0
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_simpleifp-devel
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_simpleifp0
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
python3-sssd-config
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-32bit
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-ad
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-dbus
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-ipa
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-kcm
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-krb5
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-krb5-common
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-ldap
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-proxy
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-tools
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-winbind-idmap
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/CVE-2026-68742
https://bugzilla.redhat.com/show_bug.cgi?id=2509762