CVE-2026-68742

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Read in SSSD NSS Responder

Publication date: 2026-08-03

Last updated on: 2026-08-18

Assigner: redhat-SADP

Description

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-03

Last Modified

2026-08-18

Generated

2026-08-23

AI Q&A

2026-08-03

EPSS Evaluated

2026-08-22

NVD

CVE-2026-68742

EUVD

EUVD-2026-52258

Affected Vendors & Products

Vendor	Product	Version / Range
redhat	enterprise_linux	7.0
fedoraproject	sssd	*
redhat	enterprise_linux	8.0
redhat	openshift_container_platform	4.0
redhat	enterprise_linux	9.0
redhat	enterprise_linux	10.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is in SSSD's NSS responder. The sss_nss_protocol_parse_addr() function fails to validate the addrlen field against the packet size. A local attacker can send a crafted GETHOSTBYADDR request to trigger an out-of-bounds read, crashing the process and causing a denial of service.

Detection Guidance

This vulnerability can be detected by monitoring for crashes in the SSSD NSS responder process or examining logs for malformed GETHOSTBYADDR requests. Check SSSD logs for segmentation faults or out-of-bounds read errors in the NSS responder component.

Impact Analysis

If exploited, this flaw could allow a local attacker to crash the SSSD service on your system, leading to service disruption and potential loss of access to authentication and identity services.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a local denial-of-service issue in SSSD. Compliance impacts would only occur if the service disruption caused by the vulnerability led to unauthorized data access or processing delays, which is not indicated in the provided context.

Mitigation Strategies

Update SSSD to the latest patched version. Restrict local access to the NSS responder socket to prevent unauthorized requests. Monitor for suspicious activity targeting the NSS responder.

Hi! I’m here to help you understand CVE-2026-68742. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70