CVE-2026-104043

Name of the Vulnerable Software and Affected Versions SSSD (affected versions not specified)

Description A flaw in SSSD allows a local attacker with access to the Name Service Switch (NSS) responder UNIX socket to trigger an integer underflow. By sending a specially crafted request with an undersized packet header, the attacker causes an out-of-bounds memory read during packet parsing. This leads to the crash of the responder process, resulting in a Denial of Service (DoS).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.