Memory Leak in System Security Services Daemon PAC Responder Plugin
CVE-2015-5292

Currently unrated

Key Information:

Status
Vendor
CVE Published:
29 October 2015

What is CVE-2015-5292?

A memory leak issue exists in the Privilege Attribute Certificate (PAC) responder plugin within the System Security Services Daemon (SSSD). This vulnerability can be exploited by remote authenticated users through repeated logins that provoke the parsing of PAC blobs during Kerberos authentication. Such actions may lead to excessive memory consumption, ultimately resulting in a denial of service, affecting the availability of the system.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2015-5292 : Memory Leak in System Security Services Daemon PAC Responder Plugin