CVE-2026-104031
5.5 MEDIUMPublished 2026-10-06 · Updated 2026-10-06
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not released until the client connection terminates. A local attacker can exploit this vulnerability by maintaining an open connection and repeatedly submitting valid requests, leading to memory exhaustion and a Denial of Service (DoS).
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-772
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-104035
- MEDIUMCVE-2026-104045
- UNSCOREDCVE-2026-104112PoC
- HIGHCVE-2026-107286PoC
- MEDIUMCVE-2026-107834PoC
- MEDIUMCVE-2026-16678
- MEDIUMCVE-2026-19739PoC
- MEDIUMCVE-2026-19740PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.