Known vulnerabilities in System Security Services Daemon (SSSD)

Vendor: SSSD
Software CPE: cpe:2.3:a:SSSD:sssd:*:*:*:*:*:*:*:*
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting System Security Services Daemon (SSSD) System Security Services Daemon (SSSD) is affected by 14 known vulnerabilities: 2 high, 5 medium, 7 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117689 - Improper Privilege Management
CVE-2025-11561
CWE-269 Medium
No
No
- 28.10.2025 SB2025102811
SB2025102813
SB2025102814
and 35 more
#VU88857 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-3758
CWE-362 Medium
No
No
- 19.04.2024 SB2024041945
SB2024041946
SB2024041947
and 19 more
#VU71473 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-4254
CWE-90 High
No
No
2.3.1 24.01.2023 SB2023012437
SB2023012440
SB2023012457
and 13 more
#VU56000 - Command injection
CVE-2021-3621
CWE-77 Medium
No
No
2.6.0 20.08.2021 SB2021082002
SB2021082206
SB2021083125
and 19 more
#VU34938 - Improper Authentication
CVE-2012-3462
CWE-287 High
No
No
- 26.12.2019 SB2019122634
#VU17376 - Permissions, Privileges, and Access Controls
CVE-2018-16838
CWE-264 Low
No
No
- 05.02.2019 SB2019020505
SB2019061806
SB2019061909
and 5 more
#VU17121 - Improper Access Control
CVE-2019-3811
CWE-284 Low
No
No
2.1.0 22.01.2019 SB2018120315
SB2019040813
SB2019031808
and 4 more
#VU16637 - Exposure of sensitive information to an unauthorized actor
CVE-2018-16883
CWE-200 Low
No
No
- 19.12.2018 SB2018122011
#VU14328 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10852
CWE-200 Low
No
No
1.16.3 10.08.2018 SB2018081312
SB2018081019
SB2019011402
and 3 more
#VU40622 - Missing release of memory after effective lifetime
CVE-2015-5292
CWE-401 Low
No
No
1.13.1 29.10.2015 SB2015102901
SB2016011805
SB2015100701
and 2 more
#VU42973 - Permissions, Privileges, and Access Controls
CVE-2013-0287
CWE-264 Low
No
No
- 21.03.2013 SB2013032101
#VU43060 - Memory corruption
CVE-2013-0220
CWE-119 Medium
No
No
- 24.02.2013 SB2013022403
#VU45013 - Improper Authentication
CVE-2011-1758
CWE-287 Medium
No
No
- 26.05.2011 SB2011052604
#VU45409 - Resource Management Errors
CVE-2010-4341
CWE-399 Low
No
No
- 25.01.2011 SB2011012503