{"affected":[{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"sssd","product":"Red Hat Enterprise Linux 10","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"sssd","product":"Red Hat Enterprise Linux 6","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"sssd","product":"Red Hat Enterprise Linux 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"sssd","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"sssd","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-8","product":"Red Hat OpenShift Container Platform 4","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 5","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2026-104038","cwes":["CWE-476"],"description":"A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks an expected Security Identifier (SID) extension. In deployments configured with SID-based certificate mapping rules, the service fails to verify the presence of the extension before processing it, causing the process to crash during authentication or lookup operations.","epss":{"date":"2026-11-05","percentile":0.18938,"score":0.00267},"exploits":[{"kind":"exploit","source":"ADP: CISA-ADP","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478980"}],"kev":null,"metrics":[{"score":5.9,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},{"score":5.9,"severity":"medium","source":"NVD: secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1793895446943,"publishedAt":1791245547072,"references":[{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-104038"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478980"},{"source":"ADP: CISA-ADP","tags":["exploit"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478980"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/security/cve/CVE-2026-104038"},{"source":"secalert@redhat.com","tags":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478980"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478980"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"A configuration-based workaround is available. Until a fix is shipped, avoid SSSD certificate mapping rules whose LDAPU1 maprule expands the {sid} or {sid.rid} templates (for example, 'maprule = LDAPU1:(objectsid={sid.rid})'). If SID-based mapping is required, reject certificates that lack the Microsoft SID extension (OID 1.3.6.1.4.1.311.25.2) before they reach the affected certificate mapping evaluation path, so SID-based rules fail cleanly instead of crashing the service."}],"revision":"8ad2b144152d474100a5a0fe883dbb6df73c7dd71d0b8ca66657d0c718c89399","sources":[{"modifiedAt":1793893969610,"name":"CNA: redhat","retrievedAt":1793895238772,"url":"https://www.cve.org/CVERecord?id=CVE-2026-104038"},{"modifiedAt":1793895446943,"name":"NVD","retrievedAt":1793902856067,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104038"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793895249072,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-104038"}],"ssvc":{"assessedAt":1791403710462,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Sssd: sssd: denial of service via missing sid extension in certificate mapping","updatedAt":1793902856067}