Red Hat Security Advisory

RHSA-2011:0975

sssd security, bug fix, and enhancement update

Released 2011-07-21 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) sssd-1.5.1-37.el5, sssd-1.5.1-37.el5.i386, sssd-1.5.1-37.el5.ia64 +9
Red Hat Enterprise Linux Desktop (v. 5 client) sssd-1.5.1-37.el5, sssd-1.5.1-37.el5.i386, sssd-client-1.5.1-37.el5 +3

Fixes 1 record

TI-2010-04074 CVE-2010-4341 · GHSA-qfqv-cr9x-27pg

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder…

LOW 12

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a cr…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00486 Published 2011-01-25 Fixed CWE-399