Total vulnerabilities in the database
The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.
Software | From | Fixed in |
---|---|---|
fedoraproject / sssd | 1.5.0 | 1.5.0.x |
fedorahosted / sssd | 1.4.0 | 1.4.0.x |
fedorahosted / sssd | 1.4.1 | 1.4.1.x |
fedoraproject / sssd | 1.3.0 | 1.3.0.x |