MEDIUM 5.5 NVD

CVE-2026-104042

A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication Module (PAM) request containing a z

A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication Module (PAM) request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundaries when processing the token, causing the PAM responder to crash.

References

https://access.redhat.com/security/cve/CVE-2026-104042
https://bugzilla.redhat.com/show_bug.cgi?id=2478862

Published: 2026-10-06 · Source: NVD · Feed updated: 2026-10-06

This medium severity vulnerability with a CVSS score of 5.5 was published on 2026-10-06 via NVD.

vulnfeed aggregates 11356 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.