CVE-2026-80048 : 상세 정보

CVE-2026-80048

2026-10-06
23h28 +00:00
2026-11-06
00h55 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

Sssd: sssd-kcm: local denial of service via excessive memory preallocation

A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory exhaustion within the `sssd-kcm` responder, resulting in a Denial of Service (DoS) for affected deployments.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-770 Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

참고 자료

https://access.redhat.com/security/cve/CVE-2026-80048
Tags : vdb-entry, x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2479377
Tags : issue-tracking, x_refsource_REDHAT