What’s Vulnerable › Vulnerabilities

CVE-2026-104042: Sssd: sssd: denial of service via out-of-bounds read in pam responder

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-06 · updated 2026-10-07
• Weakness: CWE-125

Description

A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication Module (PAM) request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundaries when processing the token, causing the PAM responder to crash.

Affected products

• Red Hat OpenShift Container Platform 4.18: all versions
• Red Hat Enterprise Linux 10: all versions
• Red Hat Enterprise Linux 7: all versions
• Red Hat Enterprise Linux 8: all versions
• Red Hat Enterprise Linux 9: all versions

References

• https://access.redhat.com/security/cve/CVE-2026-104042
• https://bugzilla.redhat.com/show_bug.cgi?id=2478862
• https://bugzilla.redhat.com/show_bug.cgi?id=2478862

Get alerted when CVE-2026-104042 or the next vulnerability affects your stack