A vulnerability in SSSD allows an unprivileged local user to cause memory exhaustion by repeatedly requesting lookups for nonexistent entries through the Name Service Switch (NSS) responder. The negative cache does not limit the total number of stored entries and only removes expired records when an existing key is rechecked, which can lead to unbounded cache growth. This can result in a Denial of Service (DoS) as the responder becomes unresponsive or terminates. The issue affects multiple specific versions of SSSD. The CVSS score is 5.5, indicating a medium severity level.
A vulnerability in sssd allows a local attacker to cause a Denial of Service (DoS) by sending a crafted PAM request with a zero-length authentication token. This flaw arises from missing input validation, leading to out-of-bounds reads and a crash of the PAM responder. The issue affects multiple specific versions of sssd. The CVSS score is 5.5, indicating a medium severity impact focused on availability disruption.
A vulnerability in SSSD allows a local attacker with access to the NSS responder UNIX socket to cause an integer underflow by sending a specially crafted request with an undersized packet header. This leads to an out-of-bounds memory read during packet parsing, crashing the responder process and causing a denial of service. The issue affects multiple specific versions of SSSD. The CVSS score is 5.5, indicating medium severity.
A vulnerability in sssd allows a local attacker to cause a Denial of Service (DoS) by sending a specially crafted PAM request when passkey authentication is enabled. The flaw arises from a missing state validation check in passkey Kerberos handling, which leads to dereferencing an uninitialized pointer and crashing the PAM responder, disrupting authentication services on the host. This issue affects multiple specific versions of sssd. The CVSS score is 6.2, indicating a medium severity impact focused on availability.
A vulnerability in SSSD allows a remote authenticated user with an expired password to bypass LDAP access control restrictions when password expiration warnings are evaluated before restrictive LDAP access rules. This occurs because the expired-password warning prematurely ends rule evaluation and treats the access request as successful. The issue affects multiple specific versions of SSSD and has a CVSS score of 6.8, indicating medium severity.
A memory management flaw in SSSD affects configurations with the autofs responder service enabled. Memory allocated during successful request processing is not freed until the client connection closes. A local attacker can exploit this by keeping a connection open and repeatedly sending valid requests, causing memory exhaustion and denial of service. The vulnerability has a medium severity with a CVSS score of 5.5.
A vulnerability in SSSD allows an unprivileged local user to repeatedly request master automount map updates through the autofs responder without proper authorization. This causes global cache invalidation and forces repeated backend directory lookups, resulting in denial of service due to degraded automount availability and increased resource consumption. The issue affects multiple specific versions of SSSD. The CVSS score is 5.5, indicating medium severity.
A vulnerability in SSSD allows bypassing account expiration enforcement when using LDAP shadow attributes. Specifically, SSSD does not treat an expiration value of zero as an expired account, permitting users with valid credentials for such accounts to authenticate despite intended deactivation. This flaw affects multiple specific versions of SSSD and has a medium severity rating with a CVSS score of 5.4.
A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder component of SSSD during Kerberos ticket-granting ticket renewal. An authenticated local user with a renewable Kerberos ticket can trigger this flaw on systems configured with KCM renewal, causing the KCM responder service to crash and resulting in a denial of service. The vulnerability has a CVSS score of 4.7, indicating medium severity. Multiple specific versions of SSSD are affected.
A vulnerability in SSSD's Kerberos Credential Manager (KCM) responder allows a local user to cause a Denial of Service (DoS) by maintaining persistent connections and repeatedly storing and destroying credentials. This leads to continuous memory consumption growth due to failure to release cached objects, eventually exhausting memory and making the service unresponsive. The issue affects multiple specific versions of SSSD. The CVSS score is 5.5, indicating a medium severity impact focused on availability.
A vulnerability in SSSD allows a local attacker to cause a denial of service by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This triggers an integer underflow and an out-of-bounds memory read, crashing the responder process. The issue affects multiple specific versions of SSSD and has a medium severity rating with a CVSS score of 5.5.
A vulnerability in sssd allows a remote attacker to cause a denial of service (DoS) by submitting a certificate missing an expected Security Identifier (SID) extension. When sssd is configured with SID-based certificate mapping rules, it does not verify the presence of the SID extension before processing, leading to a crash during authentication or lookup operations. This vulnerability affects multiple specific versions of sssd and has a CVSS score of 5.9, indicating medium severity focused on availability.
A vulnerability in SSSD allows a local attacker to cause a denial of service by sending a specially crafted request to the autofs responder UNIX socket. The flaw arises from improper buffer offset calculation during request parsing, leading to an out-of-bounds memory read and crashing the autofs responder process. This issue affects multiple specific versions of SSSD. The CVSS score is 3.3, indicating medium severity.
A vulnerability in sssd allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token lacking null terminators. This causes the authentication service to read beyond the buffer, crashing the process and disrupting authentication services. The issue affects multiple specific versions of sssd. The CVSS score is 5.5, indicating medium severity. No known exploits are reported in the wild. No official patch information is provided.
The npm package @diezyclutch/baileys contains malicious code or depends on a package with malicious code. Installing or running this package can lead to full compromise of the affected computer, risking exposure of all stored secrets and keys. Immediate removal of the package and rotation of all secrets from a different machine is strongly advised. However, removal may not fully eliminate the threat due to potential persistent malicious software.
A security update for rsyslog addresses a vulnerability in the imdtls module that allowed bypassing permitted-peer authorization. This issue could potentially allow unauthorized peers to connect despite authorization controls. The update fixes this authorization bypass.
A remote code execution vulnerability (CVE-2026-104851) exists in the ReferenceFileSystem component of python-fsspec due to server-side template injection when evaluating fields from Kerchunk reference JSON documents. This vulnerability affects multiple specific versions of fsspec and has a high CVSS score of 8.8. No patch or remediation details are provided in the available data.
Multiple security issues were addressed in the jupyter-jupyterlab-templates package version 0.5.3-3.1 on openSUSE Tumbleweed. The vulnerabilities affect the node-katex package versions 0.8.3+dfsg-1, 0.10.2+dfsg-8, 0.10.2+dfsg-9, and 0.10.2+dfsg-10. No specific technical details about the vulnerabilities or their impact are provided. The issues have been fixed in the updated package version.
NVIDIA GPU Display Driver for Linux version 304 contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. This issue is addressed in a security update for the nvidia-open-driver-G07-signed package, which includes fixes for multiple vulnerabilities including CVE-2026-47489. The update also addresses build issues on Linux 7.3.0 and disables CXL support as per NVIDIA's advice. Specific affected versions include several Ubuntu package versions of the 304 and 340 driver series. The vulnerability has a CVSS score of 7.8, indicating a high impact on confidentiality, integrity, and availability.
The Python package beautifytext version 1.0.3 (and also 1.0.4 and 1.0.7) contains a malicious backdoor. Upon import or installation, it spawns a detached background process that registers the host with a remote command and control (C2) server and polls it for commands. This backdoor can execute arbitrary shell commands, read and write files on the infected host, and exfiltrate results to the attacker-controlled server. The malicious behavior activates both on import and during package installation, making it stealthy and persistent.