CVE-2026-90996 — Sssd: sssd: denial of service in nss responder via crafted zero-length requests
A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network Security Services (NSS) responder. This could l…
Published: 2026-09-14 · CVSS: 4.0 · CVSS 3.1
A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network Security Services (NSS) responder. This could lead to a denial-of-service condition, causing the NSS responder to become unstable or terminate. This vulnerability affects the availability of the system responder.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7