Multiple vulnerabilities have been identified in SSSD, a system service managing access to remote directories and authentication. These flaws include out-of-bounds memory reads, use-after-free, integer underflows, missing authorization checks, and memory leaks. Exploitation by local attackers can lead to denial of service (DoS) conditions, memory exhaustion, and unauthorized access due to account expiration bypass. The issues affect configurations where autofs responder, Kerberos Credential Manager, PAM responder, and NSS responder services are enabled. A security update fixing these vulnerabilities is available in version 2.6.1-38.oe2203sp4.