Back to search
CVE-2010-4341
Published: Jan 25, 2011
Modified: Aug 7, 2024
PUBLISHED
Description
The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
43068
third-party-advisory
x_refsource_SECUNIA
45961
vdb-entry
x_refsource_BID
43055
third-party-advisory
x_refsource_SECUNIA
ADV-2011-0212
vdb-entry
x_refsource_VUPEN
https://bugzilla.redhat.com/show_bug.cgi?id=661163
x_refsource_CONFIRM
FEDORA-2011-0364
vendor-advisory
x_refsource_FEDORA
sssd-pamparseindatav2-dos(64881)
vdb-entry
x_refsource_XF
RHSA-2011:0560
vendor-advisory
x_refsource_REDHAT
FEDORA-2011-0337
vendor-advisory
x_refsource_FEDORA
ADV-2011-0197
vdb-entry
x_refsource_VUPEN
RHSA-2011:0975
vendor-advisory
x_refsource_REDHAT
SUSE-SR:2011:002
vendor-advisory
x_refsource_SUSE
43053
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now