https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:24:02 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:19610 <p><strong>Affected:</strong> AlmaLinux:8: libipa_hbac, AlmaLinux:8: libsss_autofs, AlmaLinux:8: libsss_certmap, AlmaLinux:8: libsss_idmap, AlmaLinux:8: libsss_nss_idmap, AlmaLinux:8: libsss_nss_idmap-devel, AlmaLinux:8: libsss_simpleifp, AlmaLinux:8: libsss_sudo, AlmaLinux:8: python3-libipa_hbac, AlmaLinux:8: python3-libsss_nss_idmap and 20 more</p> <p>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.</p> <p>Security Fix(es):</p> <p>* sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libipa_hbac, AlmaLinux:8: libsss_autofs, AlmaLinux:8: libsss_certmap, AlmaLinux:8: libsss_idmap, AlmaLinux:8: libsss_nss_idmap, AlmaLinux:8: libsss_nss_idmap-devel, AlmaLinux:8: libsss_simpleifp, AlmaLinux:8: libsss_sudo, AlmaLinux:8: python3-libipa_hbac, AlmaLinux:8: python3-libsss_nss_idmap and 20 more</p> <p>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.</p> <p>Security Fix(es):</p> <p>* sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:19610 https://cve.radiocsirt.org/vuln/bdu:2026-02738 bdu:2026-02738 https://cve.radiocsirt.org/vuln/bdu:2026-02738 https://cve.radiocsirt.org/vuln/euvd-2026-361951 EUVD-2026-361951 https://cve.radiocsirt.org/vuln/euvd-2026-361951 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11561 <p>A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.</p> <p>A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11561 https://cve.radiocsirt.org/vuln/ghsa-gj84-8vfx-q3vm <p>A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, SSSD does not enable the Kerberos local authentication plugin (sssd_krb5_localauth_plugin), allowing an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users. This can result in unauthorized access or privilege escalation on domain-joined Linux hosts.</p> <p>A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, SSSD does not enable the Kerberos local authentication plugin (sssd_krb5_localauth_plugin), allowing an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users. This can result in unauthorized access or privilege escalation on domain-joined Linux hosts.</p> https://cve.radiocsirt.org/vuln/ghsa-gj84-8vfx-q3vm https://cve.radiocsirt.org/vuln/oesa-2025-2514 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: sssd</p> <p>Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA. Security Fix(es):</p> <p>A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, SSSD does not enable the Kerberos local authentication plugin (sssd_krb5_localauth_plugin), allowing an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users. This can result in unauthorized access or privilege escalation on domain-joined Linux hosts.(CVE-2025-11561)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: sssd</p> <p>Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA. Security Fix(es):</p> <p>A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, SSSD does not enable the Kerberos local authentication plugin (sssd_krb5_localauth_plugin), allowing an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users. This can result in unauthorized access or privilege escalation on domain-joined Linux hosts.(CVE-2025-11561)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2514 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15751-1 <p>libipa_hbac-devel-2.11.1-2.1 on GA media</p> <p>libipa_hbac-devel-2.11.1-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15751-1 https://cve.radiocsirt.org/vuln/rhsa-2025:19848 <p>sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems</p> <p>sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems</p> https://cve.radiocsirt.org/vuln/rhsa-2025:19848 https://cve.radiocsirt.org/vuln/suse-su-2025:21066-1 <p>Security update for sssd</p> <p>Security update for sssd</p> https://cve.radiocsirt.org/vuln/suse-su-2025:21066-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11561 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: sssd, Ubuntu:Pro:18.04:LTS: sssd, Ubuntu:Pro:20.04:LTS: sssd, Ubuntu:22.04:LTS: sssd, Ubuntu:24.04:LTS: sssd, Ubuntu:25.10: sssd</p> <p>A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: sssd, Ubuntu:Pro:18.04:LTS: sssd, Ubuntu:Pro:20.04:LTS: sssd, Ubuntu:22.04:LTS: sssd, Ubuntu:24.04:LTS: sssd, Ubuntu:25.10: sssd</p> <p>A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an attacker with permission to modify certain AD attributes (such as userPrincipalName or samAccountName) to impersonate privileged users, potentially resulting in unauthorized access or privilege escalation on domain-joined Linux hosts.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11561 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2488 <p>Ein entfernter authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Administratorrechte zu erlangen oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Administratorrechte zu erlangen oder Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2488