CVE-2026-68744
Received Received - Intake

SSSD NSS Responder Heap Information Disclosure

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: Red Hat, Inc.

Description
A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to disclose cached directory data and heap layout information from the sssd_nss process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-68744
EUVD
EUVD-2026-52576

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
redhat sssd *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-908 The product uses or accesses a resource that has not been initialized.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in SSSD where the sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped. This causes uninitialized heap bytes to be transmitted to the client, potentially exposing cached directory data and heap layout information.

Impact Analysis

A local attacker could exploit this to disclose sensitive cached directory data and heap layout information from the sssd_nss process, which may lead to further attacks or information leakage.

Mitigation Strategies

Update SSSD to the latest patched version to address the heap memory leak issue. Monitor system logs for unusual activity in the sssd_nss process. Restrict local access to prevent unauthorized exploitation of cached directory data.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68744. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart