Nixpkgs security tracker

Login with GitHub

Details of issue NIXPKGS-2026-2347

NIXPKGS-2026-2347
published 55 minutes ago
Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
Permalink CVE-2026-68742
5.5 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): None (N)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): High (H)
updated 55 minutes ago by @LeSuisse Activity log
  • Created suggestion 9 hours ago
  • @LeSuisse ignored
    2 packages
    • python313Packages.aliyun-python-sdk-osssddp
    • python314Packages.aliyun-python-sdk-osssddp
    57 minutes ago
  • @LeSuisse accepted 57 minutes ago
  • @LeSuisse published on GitHub 55 minutes ago
Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.

References

Affected products

sssd
rhcos

Matching in nixpkgs

Ignored packages (2)

Package maintainers