Catalogo CVE

CVE-2026-14476

A path traversal flaw was found in SSSD's AD GPO…

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.

Gravità: High · CVSS 8CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Published: Jul 7, 2026, 9:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.67% · Oct 27, 2026

Projects and upstream resources

[sssd][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiansid	sssd	`2.13.1-1`	FixedDistribution-reported fixed boundary	[CVE-2026-14476]
Debiansid	sssd	`2.13.1-3`	Fixed	[CVE-2026-14476]

Showing 2 fix observations. All 7 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	sssd	Not reported	UnknownSource applicability is not established	Provider not reported
Debianbookworm	sssd	Not reported	AffectedDistribution reports no fix	[CVE-2026-14476]
Debianbookworm	sssd	`2.8.2-4+deb12u1`	Affected	[CVE-2026-14476]
Debiansid	sssd	`2.13.1-1`	FixedDistribution-reported fixed boundary	[CVE-2026-14476]
Debiansid	sssd	`2.13.1-3`	Fixed	[CVE-2026-14476]
Debiantrixie	sssd	Not reported	AffectedDistribution reports no fix	[CVE-2026-14476]
Debiantrixie	sssd	`2.10.1-2`	Affected	[CVE-2026-14476]

Original provider fields

{
  "package_releases": [
    {
      "name": "sssd",
      "status": "fixed",
      "release": "sid",
      "version": "2.13.1-3"
    },
    {
      "name": "sssd",
      "status": "vulnerable",
      "release": "trixie",
      "version": "2.10.1-2"
    },
    {
      "name": "sssd",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "2.8.2-4+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1141769,
      "name": "sssd",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2.13.1-1"
    },
    {
      "bug": 1141769,
      "name": "sssd",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": 1141769,
      "name": "sssd",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "sssd",
      "fixed_version": "not yet fixed",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #1141769]

Publisher notes

[trixie] sssd: Minor issue [bookworm] sssd: Minor issue

OpenFactory catalog packages

L’associazione dei pacchetti è in corso.

[Debian 12 (Bookworm)]

[libipa-hbac0]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[libipa-hbac-dev]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[libnss-sss]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[libpam-sss]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[libsss-certmap0]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[libsss-certmap-dev]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[libsss-idmap0]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[libsss-idmap-dev]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[libsss-nss-idmap0]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[libsss-nss-idmap-dev]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[libsss-simpleifp0]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[libsss-simpleifp-dev]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[libsss-sudo]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[python3-libipa-hbac]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[python3-libsss-nss-idmap]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[python3-sss]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[sssd]Sconosciuto
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[sssd-ad]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[sssd-ad-common]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
[sssd-common]Sconosciuto
Pacchetto sorgente: [sssd]
Dettagli (2)
- 2.8.2-4+deb12u1 · amd64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12
- 2.8.2-4+deb12u1 · arm64 · bookworm
  Interessata
  nvd · sssd · debian · bookworm; nvd · sssd · debian · 12

Altri risultati

Osservato: Oct 23, 2026, 9:44:31 PM UTC

Riferimenti

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]