Veracode Vulnerability DatabaseVERACODE:24596Denial Of Service (DoS)
EPSS
Percentile
10.1%
The System Security Services Daemon (SSSD) is vulnerable to denial of service (DoS). A flaw was found in the SSSD PAM responder that could allow a local attacker to crash SSSD via a carefully-crafted packet. With SSSD unresponsive, legitimate users could be denied the ability to log in to the system.
References
lists.fedoraproject.org/pipermail/package-announce/2011-January/053319.html
lists.fedoraproject.org/pipermail/package-announce/2011-January/053337.html
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
secunia.com/advisories/43053
secunia.com/advisories/43055
secunia.com/advisories/43068
www.redhat.com/support/errata/RHSA-2011-0560.html
www.redhat.com/support/errata/RHSA-2011-0975.html
www.securityfocus.com/bid/45961
www.vupen.com/english/advisories/2011/0197
www.vupen.com/english/advisories/2011/0212
access.redhat.com/errata/RHSA-2011:0560
access.redhat.com/security/updates/classification/#low
bugzilla.redhat.com/show_bug.cgi?id=661163
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/index.html
exchange.xforce.ibmcloud.com/vulnerabilities/64881
Related
