Multiple vulnerabilities have been identified in SSSD, a set of daemons managing access to remote directories and authentication mechanisms. These flaws include out-of-bounds memory reads, use-after-free conditions, missing authorization checks, and improper handling of authentication tokens. Exploitation of these vulnerabilities by local attackers can cause denial of service (DoS) conditions by crashing various SSSD responder processes or exhausting memory. Additionally, one vulnerability allows bypassing account expiration controls, enabling unauthorized access. These issues affect versions prior to 2.9.4-34.oe2403sp3 and have been addressed in that fixed release.