CVE-2010-4341: Fedorahosted Sssd

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.

Affected products

• Fedorahosted Sssd: version 1.4.0 only; version 1.4.1 only
• Fedoraproject Sssd: version 1.3.0 only; version 1.5.0 only

Published 2011-01-25. Last modified 2026-06-16.