CVE-2026-68743

EUVD-2026-52865
A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 0.67%
Affected Products (NVD)
VendorProductVersion
fedoraprojectsssd
-
redhatopenshift_container_platform
4.0
redhatenterprise_linux
7.0
redhatenterprise_linux
8.0
redhatenterprise_linux
9.0
redhatenterprise_linux
10.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
sssd
bookworm
vulnerable
sid
2.13.1-3
fixed
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sssd
bionic
Fixed 1.16.1-1ubuntu1.8+esm1
released
focal
Fixed 2.2.3-3ubuntu0.13+esm1
released
jammy
Fixed 2.6.3-1ubuntu3.9
released
noble
Fixed 2.9.4-1.1ubuntu6.8
released
resolute
Fixed 2.12.0-1ubuntu5.4
released
xenial
Fixed 1.13.4-1ubuntu1.15+esm1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libipa_hbac-devel
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libipa_hbac0
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_certmap-devel
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_certmap0
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_idmap-devel
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_idmap0
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_nss_idmap-devel
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_nss_idmap0
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_simpleifp-devel
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_simpleifp0
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
libsss_sudo
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
python-sssd-config
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
python3-sssd-config
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-32bit
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-ad
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-common
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
sssd-common-32bit
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
sssd-dbus
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-ipa
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-kcm
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-krb5
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-krb5-common
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-ldap
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-proxy
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-tools
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 12 SP5
1.16.1-7.79.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 12 SP3
1.13.4-34.55.1
fixed
suse enterprise server 12 SP5
1.16.1-7.79.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
sssd-winbind-idmap
suse enterprise desktop 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise sap 15 SP7
2.10.2-150700.9.40.1
fixed
suse enterprise server 15 SP4
2.5.2-150400.4.51.1
fixed
suse enterprise server 15 SP7
2.10.2-150700.9.40.1
fixed
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/CVE-2026-68743
https://bugzilla.redhat.com/show_bug.cgi?id=2509760