Sssd

This hub aggregates every CVE we track for Sssd, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Sssd.

• CVE-2025-11561Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems8.8Oct 9, 2025
• CVE-2023-3758Sssd: race condition during authorization leads to gpo policies functioning inconsistently7.1Apr 18, 2024
• CVE-2022-4254sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters8.8Feb 1, 2023
• CVE-2021-3621A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user int...8.8Dec 23, 2021
• CVE-2012-3462A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup...8.8Dec 26, 2019
• CVE-2018-16838A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated user...5.4Mar 25, 2019
• CVE-2019-3811A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could i...5.2Jan 15, 2019
• CVE-2018-16883sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitive information were stored in the user ...2.5Dec 19, 2018
• CVE-2017-12173It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login enviro...4.3Jul 27, 2018
• CVE-2018-10852The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that s...3.8Jun 26, 2018
• CVE-2015-5292Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote authenticated users to caus...6.8Oct 29, 2015
• CVE-2014-0249The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restri...3.3Jun 11, 2014
• CVE-2013-0287The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which ...4.9Mar 21, 2013
• CVE-2013-0220The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in...5.0Feb 24, 2013
• CVE-2013-0219System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via ...3.7Feb 24, 2013