Threats Tagged 'oesa-2026-4425'

A vulnerability in SSSD's NFS idmap plugin allows an out-of-bounds write when processing oversized cached user or group name entries. This can be triggered locally by requesting identity lookups that exceed buffer sizes, potentially causing a denial of service by crashing the identity mapping service and possibly corrupting adjacent memory. The issue affects multiple specific versions of SSSD. The CVSS score is 5.8, indicating a medium severity level.