CVE search · CVE-2026-104032
CVE-2026-104032
medium 5.5
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of Service (DoS) from degraded automount availability and elevated resource consumption.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- secalert@redhat.com
- Weakness
- CWE-408
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
secalert@redhat.comSecondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- fedoraproject · sssd
- redhat · openshift_container_platform
- redhat · enterprise_linux
References
- https://access.redhat.com/security/cve/CVE-2026-104032Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2479381ExploitIssue TrackingMitigationVendor Advisory