一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月6日

CVE-2026-104043 [MEDIUM] – A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) re

未分类
📑 文章目录

A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the responder process and resulting in a Denial of Service (DoS).