CVE-2026-104029
âšī¸ lowSummary
A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs responder process to crash, resulting in a denial of service (DoS).
CVSS Score
3.3
Low
EPSS Score
0.1
Exploit Probability
Published Date
2026-10-05
First Seen: 2026-10-08
đ Relative Risk Intelligence
This CVE is Lower Risk - more severe than 2.8% of all 365,616 vulnerabilities in our database.
#355,557
Below average severity
Severity Percentile
đ¯ CISA SSVC Assessment Updated: Oct 7, 2026
đ Exploitation Status
None
No known exploits
âī¸ Automatable
NO
Requires human interaction
đĨ Technical Impact
Partial
Limited system impact
đ Discovered By
This issue was discovered by Found by AISLE in partnership with Red Hat.
SSVC data provided by
CISA
Last Modified
2026-10-07
Source
NVD đ
CVSS Vector 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE IDs (Weakness Types)