Skip to content
Threat Feed
Subscribe

Tag

Sssd

2 briefs RSS
medium advisory

Multiple Denial of Service Vulnerabilities in System Security Services Daemon

Local attackers can exploit multiple vulnerabilities in the System Security Services Daemon (SSSD) to trigger a denial of service condition, impacting authentication and identity management services on Linux systems.

System Security Services Daemon denial-of-service sssd linux authentication
1t
high advisory

CVE-2026-14476: SSSD AD GPO Provider Path Traversal to Root File Write and Authentication Bypass

A path traversal vulnerability (CVE-2026-14476) in SSSD's Active Directory Group Policy Object (AD GPO) provider allows an authenticated attacker with AD GPO management access to write arbitrary files outside the GPO cache directory with root privileges, leading to Kerberos configuration injection and potential authentication bypass on Red Hat Enterprise Linux systems.

SSSD AD GPO provider +5 path-traversal privilege-escalation authentication-bypass kerberos linux red-hat sssd cve
5t 1c