A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow by… (CVE-2026-104043)

CVE-2026-104043 is a vulnerability in SSSD where a local attacker with access to the NSS responder UNIX socket can cause an integer underflow by sending a specially crafted request with an undersized packet header. This leads to an out-of-bounds memory read during packet parsing, crashing the responder process and causing a Denial of Service. The vulnerability affects numerous specific versions of SSSD as listed. There is no information provided about available patches or vendor advisories in the input data.

The vulnerability results in a Denial of Service (DoS) by crashing the NSS responder process due to an out-of-bounds memory read triggered by an integer underflow. There is no indication of confidentiality or integrity impact. The attack requires local access to the NSS responder UNIX socket.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to the NSS responder UNIX socket to trusted users only to reduce the risk of exploitation.