CVE-2010-4341

LOW 2.1CVE-2010-4341 · Published 25/01/2011 · updated 16/06/2026

In short

CVE-2010-4341 is a LOW (CVSS 2.1) vulnerability affecting sssd (fedorahosted), sssd (fedoraproject).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 41.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sssd fedorahosted	`= 1.4.0= 1.4.1`	No fix yet
sssd fedoraproject	`= 1.3.0= 1.5.0`	No fix yet

Description

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.

References

lists.fedoraproject.org/pipermail/package-announce/2011-January/053319.html · Patch
lists.fedoraproject.org/pipermail/package-announce/2011-January/053337.html · Patch
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
secunia.com/advisories/43053 · Vendor Advisory
secunia.com/advisories/43055 · Vendor Advisory
secunia.com/advisories/43068
redhat.com/support/errata/RHSA-2011-0560.html
redhat.com/support/errata/RHSA-2011-0975.html
securityfocus.com/bid/45961
vupen.com/english/advisories/2011/0197 · Vendor Advisory
vupen.com/english/advisories/2011/0212
bugzilla.redhat.com/show_bug.cgi · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/64881

More vulnerabilities in sssd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free