{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"sssd","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":[],"id":"tcs_01M5NPMS6N11YSPGASMDX36P8F","modified_at":"2026-10-07T09:47:27.552149031Z","published_at":"2026-10-06T01:16:34.567Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-104036","https://security-tracker.debian.org/tracker/CVE-2026-104036"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-104036#Debian:13/sssd","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-104036"}],"summary":"A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A lo"}