CVE catalog
CVE-2010-4341
sssd: CVE-2010-4341
- Severity
- Medium
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.49% · Oct 25, 2026
The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | sssd | sid | 2.13.1-3 | fixed |
| Debian | sssd | trixie | 2.10.1-2 | fixed |
| Debian | sssd | bookworm | 2.8.2-4+deb12u1 | fixed |
| Opensuse | sssd | tumbleweed | 1.14.2-3.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | sssd | source | sid | 1.2.1-4.1 | not yet assigned | Not reported | [610032] |
| Debian | sssd | source | trixie | 1.2.1-4.1 | not yet assigned | Not reported | [610032] |
| Debian | sssd | source | bookworm | 1.2.1-4.1 | not yet assigned | Not reported | [610032] |
| Opensuse | sssd | rpm | tumbleweed | 1.14.2-3.1 | Not reported | OPENSUSE-SU-2024:10427-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [libipa_hbac0]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [libipa_hbac-devel]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [libnfsidmap-sss]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [libsss_certmap0]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [libsss_certmap-devel]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [libsss_idmap0]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [libsss_idmap-devel]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [libsss_nss_idmap0]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [libsss_nss_idmap-devel]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [python3-ipa_hbac]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [python3-sssd-config]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [python3-sss-murmur]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [python3-sss_nss_idmap]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [sssd-ad]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [sssd-cifs-idmap-plugin]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [sssd-dbus]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [sssd-idp]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [sssd-ipa]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [sssd-kcm]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
- [sssd-krb5]Unknown
Source package: [sssd]
Details (1)
2.13.1-2.1· x86_64 · tumbleweedUnknown · Fixed:
1.14.2-3.1Version impact unknown
dsa · sssd · opensuse · tumbleweed
Observed:
References
- [https://access.redhat.com/errata/RHSA-2011:0560]
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10427-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2010-4341]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:10427-1]
- [https://security-tracker.debian.org/tracker/CVE-2010-4341]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]