Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
6 versions affected across 3 products
CVE-2026-68742 Out-of-Bounds Read Denial of Service in SSSD NSS Responder https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-68742
Post summary
A new CVE-2026-68742 describes an out-of-bounds read causing a denial of service in the SSSD NSS Responder, with details linked but no proof of exploitation or patching information provided.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fedoraproject | sssd | - | - | - |
| OS | redhat | enterprise_linux | 10.0 | - | - |
| OS | redhat | enterprise_linux | 7.0 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |
| App | redhat | openshift_container_platform | 4.0 | - | - |