CVE-2026-104029 — Vulnerability intelligence
fedoraproject — sssd
Published:
- CVSS
- 3.3
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs responder process to crash, resulting in a denial of service (DoS).