CVE-2026-68742— Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
Possible ATT&CK Techniques 1AI
T1203 · Exploitation for Client ExecutionAffected Version Matrix 6
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | any | affected |
| Red Hat | Red Hat Enterprise Linux 6 | any | unaffected |
| Red Hat | Red Hat Enterprise Linux 7 | any | affected |
| Red Hat | Red Hat Enterprise Linux 8 | any | affected |
| Red Hat | Red Hat Enterprise Linux 9 | any | affected |
| Red Hat | Red Hat OpenShift Container Platform 4 | any | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-68742
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Vulnerability Title
Red Hat SSSD 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat SSSD是美国Red Hat公司的一款身份认证与权限管理软件。 Red Hat SSSD存在缓冲区错误漏洞，该漏洞源于sss_nss_protocol_parse_addr()函数未验证addrlen字段与剩余数据包体大小，可能导致本地攻击者通过向NSS responder套接字发送特制GETHOSTBYADDR请求，造成越界读取和进程崩溃，导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | - | cpe:/o:redhat:enterprise_linux:10 | |
| Red Hat | Red Hat Enterprise Linux 6 | - | cpe:/o:redhat:enterprise_linux:6 | |
| Red Hat | Red Hat Enterprise Linux 7 | - | cpe:/o:redhat:enterprise_linux:7 | |
| Red Hat | Red Hat Enterprise Linux 8 | - | cpe:/o:redhat:enterprise_linux:8 | |
| Red Hat | Red Hat Enterprise Linux 9 | - | cpe:/o:redhat:enterprise_linux:9 | |
| Red Hat | Red Hat OpenShift Container Platform 4 | - | cpe:/a:redhat:openshift:4 |
II. Public POCs for CVE-2026-68742
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-68742
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-68742 (2)
Same Patch Batch · Red Hat · 2026-08-03 · 6 CVEs total
| CVE-2026-6695 | 5.5 MEDIUM | Gimp: gimp: remote code execution via crafted paa file |
| CVE-2026-6694 | 5.5 MEDIUM | Gimp: gimp file-png plugin: denial of service via oversized apng trns chunk |
| CVE-2026-18651 | 5.4 MEDIUM | 389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-l |
| CVE-2026-18477 | 4.4 MEDIUM | Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape |
| CVE-2026-18508 | 4.4 MEDIUM | Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling ar |
IV. Related Vulnerabilities
Same product: Red Hat Enterprise Linux 10
- CVE-2026-18649
Gst-plugins-good: gst-plugins-good: unbounded memory growth - CVE-2026-71227
Libkcapi: infinite loop denial of service in libkcapi _kcapi - CVE-2026-71226
Libkcapi: memory corruption via uncanceled aio requests on e - CVE-2026-71225
Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chu - CVE-2026-68743
Sssd: sssd: pam responder out-of-bounds read via unchecked a
Same vendor: Red Hat
- CVE-2026-18649
Gst-plugins-good: gst-plugins-good: unbounded memory growth - CVE-2026-18967
Keycloak-services: keycloak-services: saml onetimeuse assert - CVE-2026-44605
Rpm: heap buffer overflow in ndb slot table parsing - CVE-2026-15572
Keycloak-services: keycloak-services: dcr protocol mapper ty - CVE-2026-16442
Keycloak-services: keycloak-services: saml idp-initiated bro
Same weakness: CWE-125
- CVE-2026-19027
HDF5 out-of-bounds heap read in N-Bit filter decompression - CVE-2026-70598
Electron: Off-screen rendering trusts GPU-supplied geometry - CVE-2026-71256
nanoMODBUS Client-Side Out-of-Bounds Read Leading to Wild-Po - CVE-2026-45705
OpenSIPS: OOB Read in Multipart Body Boundary Parsing - CVE-2026-68743
Sssd: sssd: pam responder out-of-bounds read via unchecked a
V. Comments for CVE-2026-68742
No comments yet