https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:09:04 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11386 bdu:2026-11386 https://cve.radiocsirt.org/vuln/bdu:2026-11386 https://cve.radiocsirt.org/vuln/euvd-2026-362206 EUVD-2026-362206 https://cve.radiocsirt.org/vuln/euvd-2026-362206 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6245 <p>A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an out-of-bounds read when processed by functions like snprintf(). A local attacker could potentially trigger this vulnerability by initiating a crafted passkey authentication request, causing the SSSD PAM responder to crash, resulting in a local Denial of Service (DoS).</p> <p>A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an out-of-bounds read when processed by functions like snprintf(). A local attacker could potentially trigger this vulnerability by initiating a crafted passkey authentication request, causing the SSSD PAM responder to crash, resulting in a local Denial of Service (DoS).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-6245 https://cve.radiocsirt.org/vuln/ghsa-g672-w7xh-qp9j <p>A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an out-of-bounds read when processed by functions like snprintf(). A local attacker could potentially trigger this vulnerability by initiating a crafted passkey authentication request, causing the SSSD PAM responder to crash, resulting in a local Denial of Service (DoS).</p> <p>A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an out-of-bounds read when processed by functions like snprintf(). A local attacker could potentially trigger this vulnerability by initiating a crafted passkey authentication request, causing the SSSD PAM responder to crash, resulting in a local Denial of Service (DoS).</p> https://cve.radiocsirt.org/vuln/ghsa-g672-w7xh-qp9j https://cve.radiocsirt.org/vuln/oesa-2026-2169 <p><strong>Affected:</strong> openEuler:24.03-LTS: sssd</p> <p>Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA. Security Fix(es):</p> <p>A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an out-of-bounds read when processed by functions like snprintf(). A local attacker could potentially trigger this vulnerability by initiating a crafted passkey authentication request, causing the SSSD PAM responder to crash, resulting in a local Denial of Service (DoS).(CVE-2026-6245)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: sssd</p> <p>Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA. Security Fix(es):</p> <p>A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an out-of-bounds read when processed by functions like snprintf(). A local attacker could potentially trigger this vulnerability by initiating a crafted passkey authentication request, causing the SSSD PAM responder to crash, resulting in a local Denial of Service (DoS).(CVE-2026-6245)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2169 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10659-1 <p>libipa_hbac-devel-2.13.0-1.1 on GA media</p> <p>libipa_hbac-devel-2.13.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10659-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6245 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: sssd, Ubuntu:25.10: sssd, Ubuntu:26.04:LTS: sssd</p> <p>A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an out-of-bounds read when processed by functions like snprintf(). A local attacker could potentially trigger this vulnerability by initiating a crafted passkey authentication request, causing the SSSD PAM responder to crash, resulting in a local Denial of Service (DoS).</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: sssd, Ubuntu:25.10: sssd, Ubuntu:26.04:LTS: sssd</p> <p>A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an out-of-bounds read when processed by functions like snprintf(). A local attacker could potentially trigger this vulnerability by initiating a crafted passkey authentication request, causing the SSSD PAM responder to crash, resulting in a local Denial of Service (DoS).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6245