CVE-2026-104042

Name of the Vulnerable Software and Affected Versions sssd (affected versions not specified)

Description A flaw in sssd allows a local attacker to cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication Module (PAM) request to the responder socket. The request contains a zero-length authentication token which, due to missing input validation, triggers an out-of-bounds read (reading data beyond the allocated buffer boundaries), resulting in a crash of the PAM responder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.