Description (CNA)
A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication Module (PAM) request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundaries when processing the token, causing the PAM responder to crash.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / Red Hat Enterprise Linux 10 | affected |
| Red Hat / Red Hat Enterprise Linux 6 | unknown |
| Red Hat / Red Hat Enterprise Linux 7 | affected |
| Red Hat / Red Hat Enterprise Linux 8 | affected |
| Red Hat / Red Hat Enterprise Linux 9 | affected |
| Red Hat / Red Hat OpenShift Container Platform 4 | affected |
| Red Hat / Red Hat OpenShift Container Platform 4 | affected |
CWE
CWE-125
References
- https://access.redhat.com/security/cve/CVE-2026-104042
- https://bugzilla.redhat.com/show_bug.cgi?id=2478862
ADP enrichment
No English description supplied.