CyberRota Analysis
AI-GeneratedA vulnerability in the SSSD's NSS responder allows local attackers to exploit the sss_nss_protocol_fill_initgr() function, which fails to properly manage packet size when skipping group entries. This oversight can lead to the disclosure of cached directory data and heap layout information, potentially compromising sensitive information. Organizations using SSSD should prioritize addressing this issue to mitigate the risk of local data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to disclose cached directory data and heap layout information from the sssd_nss process.