Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 8

Количество 8

ubuntu логотип

CVE-2026-68742

около 2 месяцев назад

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2026-68742

около 2 месяцев назад

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2026-68742

около 2 месяцев назад

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2026-68742

около 2 месяцев назад

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function i ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-pwm5-x9cm-2ppf

около 2 месяцев назад

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2026-11219

12 месяцев назад

Уязвимость функции sss_nss_protocol_parse_addr() компонента NSS responder сервиса управления доступом к удаленным каталогам и механизма аутентификации SSSD, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21748-1

20 дней назад

Security update for sssd

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3899-1

24 дня назад

Security update for sssd

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-68742

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.

CVSS3: 5.5
0%
Низкий
около 2 месяцев назад
redhat логотип
CVE-2026-68742

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.

CVSS3: 5.5
0%
Низкий
около 2 месяцев назад
nvd логотип
CVE-2026-68742

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.

CVSS3: 5.5
0%
Низкий
около 2 месяцев назад
debian логотип
CVE-2026-68742

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function i ...

CVSS3: 5.5
0%
Низкий
около 2 месяцев назад
github логотип
GHSA-pwm5-x9cm-2ppf

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.

CVSS3: 5.5
0%
Низкий
около 2 месяцев назад
fstec логотип
BDU:2026-11219

Уязвимость функции sss_nss_protocol_parse_addr() компонента NSS responder сервиса управления доступом к удаленным каталогам и механизма аутентификации SSSD, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
0%
Низкий
12 месяцев назад
suse-cvrf логотип
openSUSE-SU-2026:21748-1

Security update for sssd

20 дней назад
suse-cvrf логотип
SUSE-SU-2026:3899-1

Security update for sssd

24 дня назад

Уязвимостей на страницу