CVE-2026-104031Medium· 5.5▾ SunlitA flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not released until the client connection terminates. A local attacker can exploit this vu…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not released until the client connection terminates. A local attacker can exploit this vulnerability by maintaining an open connection and repeatedly submitting valid requests, leading to memory exhaustion and a Denial of Service (DoS).
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-104035Medium· 5.5A flaw was found in SSSD
CVE-2026-104039Medium· 4.7Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder
CVE-2026-104041Medium· 5.5Sssd: sssd: denial of service via unbounded negative cache growth
CVE-2026-104042Medium· 5.5Sssd: sssd: denial of service via out-of-bounds read in pam responder
CVE-2026-104040Medium· 4.4Sssd: sssd: information disclosure via odata injection in entra id lookups
CVE-2026-104043Medium· 5.5Sssd: sssd: denial of service via undersized packet parsing in nss responder