CyberRota Analysis
AI-GeneratedA vulnerability exists in the SSSD's PAM responder, specifically within the extract_authtok_v1() function, which fails to properly validate the auth_token_length against the buffer size. This oversight allows a local attacker to craft a protocol v1 request that can lead to an out-of-bounds read and crash the process, resulting in a denial of service. Organizations utilizing SSSD should prioritize patching this flaw to mitigate potential disruptions to their authentication services.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.