https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:16:35.636308+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-361999 EUVD-2026-361999 2026-10-04T11:16:35.646142+00:00 EUVD-2026-361999 https://cve.radiocsirt.org/vuln/fkie_cve-2026-68743 fkie_cve-2026-68743 2026-10-04T11:16:35.646180+00:00

A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-3v6f-w66g-3mv6 GHSA-3v6f-w66g-3mv6 2026-10-04T11:16:35.646213+00:00

A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.

 https://cve.radiocsirt.org/vuln/oesa-2026-3574 OESA-2026-3574 — sssd security update 2026-10-04T11:16:35.646230+00:00

Affected: openEuler:20.03-LTS-SP4: sssd, openEuler:22.03-LTS-SP4: sssd, openEuler:24.03-LTS-SP1: sssd, openEuler:24.03-LTS-SP3: sssd, openEuler:24.03-LTS-SP4: sssd

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA. Security Fix(es):

A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.(CVE-2026-68743)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21748-1 openSUSE-SU-2026:21748-1 — Security update for sssd 2026-10-04T11:16:35.646262+00:00

Security update for sssd

 https://cve.radiocsirt.org/vuln/suse-su-2026:23251-1 SUSE-SU-2026:23251-1 — Security update for sssd 2026-10-04T11:16:35.646281+00:00

Security update for sssd

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-68743 UBUNTU-CVE-2026-68743 2026-10-04T11:16:35.646295+00:00

Affected: Ubuntu:Pro:16.04:LTS: sssd, Ubuntu:Pro:18.04:LTS: sssd, Ubuntu:Pro:20.04:LTS: sssd, Ubuntu:22.04:LTS: sssd, Ubuntu:24.04:LTS: sssd, Ubuntu:26.04:LTS: sssd

A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.