CVE-2026-104029
Sssd: sssd: denial of service via out-of-bounds read in autofs responder
CVSS 3.1 3.3 LOWCheck source for fixed versionsKEV status unknown
cve-program · CVE-2026-104029
PublishedA flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs responder process to crash, resulting in a denial of service (DoS).
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-104029 · CVE overview and exploitation status
cve-program · CVE-2026-104029
Related changes
Linked by CVE identifier- Sssd: sssd: denial of service via out-of-bounds read in autofs responder · Affected-version evidence changed · 6 Nov 2026
- Sssd: sssd: denial of service via out-of-bounds read in autofs responder · Affected-version evidence changed · 31 Oct 2026