Sssd
Vendor:
First CVE: Jan 14, 2010 · Active for 16 years
19
Total CVEs
More Total CVEs than 93% of tracked products
1.7
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
5.8
Avg CVSS
Higher Avg CVSS than 18% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Sssd over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 14, 2010
16 years ago
Most Recent CVE
Jun 30, 2026
24 days ago
CVE Severity & Scoring
Sssd19 CVEs
26%
42%
32%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local2 (10.5%)
Network6 (31.6%)
Unknown9 (47.4%)
Physical0 (0.0%)
Adjacent Network2 (10.5%)
Attack Complexity
Low8 (42.1%)
High2 (10.5%)
Unknown9 (47.4%)
User Interaction
None8 (42.1%)
Unknown9 (47.4%)
Required2 (10.5%)
Privileges Required
Low7 (36.8%)
High1 (5.3%)
None2 (10.5%)
Unknown9 (47.4%)
Top CVEs
Signals from CVEs in this product scope (19 CVEs).
19 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-12610MEDIUM A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. | Jun 30, 2026 | 6.4 | 30 | NO | NO |
CVE-2022-4254HIGH sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters | Feb 1, 2023 | 8.8 | 28 | NO | NO |
CVE-2021-3621HIGH A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick | Dec 23, 2021 | 8.8 | 28 | NO | NO |
CVE-2012-3462HIGH A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also h | Dec 26, 2019 | 8.8 | 28 | NO | NO |
CVE-2017-12173HIGH It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a central | Jul 27, 2018 | 8.8 | 28 | NO | NO |
CVE-2018-10852HIGH The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same ra | Jun 26, 2018 | 7.5 | 24 | NO | NO |
CVE-2023-3758HIGH A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denyin | Apr 18, 2024 | 7.1 | 23 | NO | NO |
CVE-2018-16838MEDIUM A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all a | Mar 25, 2019 | 5.4 | 20 | NO | NO |
CVE-2019-3811MEDIUM A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directo | Jan 15, 2019 | 5.2 | 20 | NO | NO |
CVE-2018-16883MEDIUM sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitive information were st | Dec 19, 2018 | 5.5 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (19 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (19 CVEs).
Media Mentions
Signals from CVEs in this product scope (19 CVEs).
Top CNAs Publishing CVEs For Sssd
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.6.0 | 1 | 8.8 | 2.5% | 0 | 0 |
| 1.9.4 | 1 | 4.9 | 2.1% | 0 | 0 |
| 1.9.3 | 1 | 4.9 | 2.1% | 0 | 0 |
| 1.9.2 | 3 | 4.5 | 1.9% | 0 | 0 |
| 1.9.1 | 3 | 4.5 | 1.9% | 0 | 0 |
| 1.9.0 | 4 | 5.6 | 1.9% | 0 | 0 |
| 1.8.6 | 2 | 4.3 | 1.8% | 0 | 0 |
| 1.8.5 | 2 | 4.3 | 1.8% | 0 | 0 |
| 1.8.4 | 2 | 4.3 | 1.8% | 0 | 0 |
| 1.8.3 | 2 | 4.3 | 1.8% | 0 | 0 |
| 1.8.2 | 2 | 4.3 | 1.8% | 0 | 0 |
| 1.8.1 | 2 | 4.3 | 1.8% | 0 | 0 |
| 1.8.0 | 2 | 4.3 | 1.8% | 0 | 0 |
| 1.7.0 | 2 | 4.3 | 1.8% | 0 | 0 |
| 1.6.4 | 2 | 4.3 | 1.8% | 0 | 0 |
| 1.6.3 | 2 | 4.3 | 1.8% | 0 | 0 |
| 1.6.2 | 2 | 4.3 | 1.8% | 0 | 0 |
| 1.6.1 | 2 | 4.3 | 1.8% | 0 | 0 |
| 1.6.0 | 2 | 4.3 | 1.8% | 0 | 0 |
| 1.5.9 | 2 | 4.3 | 1.8% | 0 | 0 |