Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-90996— Sssd: sssd: denial of service in nss responder via crafted zero-length requests

Quick assessment

Affected
Red Hat Red Hat Enterprise Linux 10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 sssd 中发现了一个缺陷。一个本地非特权用户可以向网络安全服务（NSS）响应器发送一个经过特殊构造的、具有零长度请求体的请求。这可能导致服务拒绝（denial-of-service）状态，使 NSS 响应器变得不稳定或终止。该漏洞影响了系统响应器的可用性。

CVSS 4.0 · Medium

Possible ATT&CK Techniques 1 AI

T1499.001 · OS Exhaustion Flood
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-90996

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Sssd: sssd: denial of service in nss responder via crafted zero-length requests
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network Security Services (NSS) responder. This could lead to a denial-of-service condition, causing the NSS responder to become unstable or terminate. This vulnerability affects the availability of the system responder.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
整数下溢(超界折返)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat Enterprise Linux 10 - cpe:/o:redhat:enterprise_linux:10
Red Hat Red Hat Enterprise Linux 6 - cpe:/o:redhat:enterprise_linux:6
Red Hat Red Hat Enterprise Linux 7 - cpe:/o:redhat:enterprise_linux:7
Red Hat Red Hat Enterprise Linux 8 - cpe:/o:redhat:enterprise_linux:8
Red Hat Red Hat Enterprise Linux 9 - cpe:/o:redhat:enterprise_linux:9
Red Hat Red Hat OpenShift Container Platform 4 - cpe:/a:redhat:openshift:4
Red Hat Red Hat OpenShift Container Platform 4 - cpe:/a:redhat:openshift:4

II. Public POCs for CVE-2026-90996

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-90996

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-90996 (1)

Other References for CVE-2026-90996 (1)

Same Patch Batch · Red Hat · 2026-09-14 · 7 CVEs total

CVE-2026-90947 7.8 HIGH Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file
CVE-2026-90949 7.8 HIGH Gimp: gimp: heap-based buffer overflow in psp loader due to selection-channel geometry mis
CVE-2026-90948 7.8 HIGH Gimp: gimp: heap-based buffer overflow in ico loader via integer overflow in embedded png
CVE-2026-90995 5.5 MEDIUM Sssd: sssd: local denial of service due to null pointer dereference in pam responder
CVE-2026-90994 4.0 MEDIUM Sssd: sssd: denial of service via malformed pam v1 requests
CVE-2026-90463 4.0 MEDIUM Sssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `

IV. Related Vulnerabilities

Same product: Red Hat Enterprise Linux 10
Same vendor: Red Hat
Same weakness: CWE-191

V. Comments for CVE-2026-90996

No comments yet

Leave a comment