Threats Tagged 'ubuntu-cve-2026-68744'
View all threats tagged with 'ubuntu-cve-2026-68744'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ubuntu-cve-2026-68744'
Click on any threat for detailed analysis and mitigation recommendations
A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all group entries but does… (CVE-2026-68744)CVE-2026-68744 0 A vulnerability in SSSD's NSS responder allows a local attacker to obtain uninitialized heap data from the sssd_nss process. This occurs because the sss_nss_protocol_fill_initgr() function pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, leading to disclosure of cached directory data and heap layout information. The flaw does not expose credentials, hashes, or tickets, which reside in separate processes. The primary risk is information disclosure that could aid in bypassing address space layout randomization (ASLR) if combined with other vulnerabilities. No patch or effective mitigation is currently available from Red Hat. The vulnerability affects multiple specific versions of sssd across various Ubuntu LTS releases and Red Hat Enterprise Linux products. The CVSS score is 3.3, indicating a medium severity local information disclosure issue. Join the discussion | GCVE Database | 08/04/2026, 06:16:00 UTC Added: 08/06/2026, 18:17:22 UTC |
Showing 1 to 1 of 1 result