CVE-2010-4341: Low severity fedora hosted sssd vulnerability
Sebastian Krahmer discovered that it was possible to make sssd hang forever inside a loop in the pamparseindatav2() function of SSSD's PAM responder by using a carefully crafted packet to sssd. This could be exploited by a local attacker to crash sssd and prevent other legitimate users from logging into the system.
Acknowledgements:
Red Hat would like to thank Sebastian Krahmer for reporting this issue.
Other sources
The pamparseindatav2 function in src/responder/pam/pamsrvcmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4341?
CVE-2010-4341 is a high severity vulnerability that can cause SSSD to crash.
How do I fix CVE-2010-4341?
To fix CVE-2010-4341, upgrade SSSD to version 1.5.1 or later.
Which versions are affected by CVE-2010-4341?
CVE-2010-4341 affects SSSD versions 1.3.0, 1.4.0, 1.4.1, and 1.5.0.
Who can exploit CVE-2010-4341?
CVE-2010-4341 can be exploited by local attackers with access to the SSSD service.
What does CVE-2010-4341 impact?
CVE-2010-4341 impacts the stability of the SSSD service by causing it to hang indefinitely.