Multiple vulnerabilities have been identified in SSSD, a set of daemons managing access to remote directories and authentication mechanisms. These flaws include out-of-bounds memory reads, use-after-free, integer underflows, missing authorization checks, and improper handling of authentication tokens. Exploitation can lead to denial of service (DoS) conditions by crashing various SSSD responder processes or exhausting memory. Additionally, one vulnerability allows bypassing account expiration controls, enabling unauthorized access. These issues affect local attackers with varying privileges. A security update fixing these vulnerabilities is available in version 2.9.4-34.oe2403sp1.