CVE-2026-90996

5.5 Moyenne

Publiée le 14/09/2026 à 18:17 · Modifiée le 07/10/2026 à 16:29 · Analysée par le NVD · Source : secalert@redhat.com

Description

A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network Security Services (NSS) responder. This could lead to a denial-of-service condition, causing the NSS responder to become unstable or terminate. This vulnerability affects the availability of the system responder.

Traduire en français

Produits concernés

Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Red Hat OpenShift Container Platform 4
Fedoraproject sssd
Redhat openshift container platform
Redhat enterprise linux

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.0 Moyenne	secalert@redhat.com	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L`
3.1	5.5 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-191

Références

https://access.redhat.com/security/cve/CVE-2026-90996 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2478986 ExploitIssue TrackingMitigationVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories