OESA-2026-4713

Dashboard / Vulnerabilities / OESA-2026-4713

OESA-2026-4713

Summary: sssd security update

Details: Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA. Security Fix(es): A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs responder process to crash, resulting in a denial of service (DoS).(CVE-2026-104029) A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not released until the client connection terminates. A local attacker can exploit this vulnerability by maintaining an open connection and repeatedly submitting valid requests, leading to memory exhaustion and a Denial of Service (DoS).(CVE-2026-104031) A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a denial of service (DoS).(CVE-2026-104037)

References: https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4713, https://nvd.nist.gov/vuln/detail/CVE-2026-104029, https://nvd.nist.gov/vuln/detail/CVE-2026-104031, https://nvd.nist.gov/vuln/detail/CVE-2026-104037