CVE-2026-6245: Sssd: out-of-bounds read in the sssd
A flaw was found in the System Security Services Daemon (SSSD). The pampasskeychildreaddata() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an out-of-bounds read when processed by functions like snprintf(). A local attacker could potentially trigger this vulnerability by initiating a crafted passkey authentication request, causing the SSSD PAM responder to crash, resulting in a local Denial of Service (DoS).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/sssdto a version that resolves this vulnerability.Fixed in 2.4.1-2Fixed in 2.4.1-2+deb11u1Fixed in 2.8.2-4+deb12u1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6245?
CVE-2026-6245 is rated as a moderate severity vulnerability due to potential out-of-bounds read issues.
How do I fix CVE-2026-6245?
To mitigate CVE-2026-6245, you should update the System Security Services Daemon (SSSD) to the latest patched version.
What software is affected by CVE-2026-6245?
CVE-2026-6245 affects the System Security Services Daemon (SSSD) specifically.
What does CVE-2026-6245 exploit?
CVE-2026-6245 exploits an out-of-bounds read vulnerability in the pam_passkey_child_read_data() function within SSSD.
Is CVE-2026-6245 a remote code execution vulnerability?
No, CVE-2026-6245 does not provide an avenue for remote code execution but may expose sensitive data.