CVE-2013-0220: Fedoraproject Sssd

Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days.

The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.

Affected products

• Fedoraproject Sssd: up to and including 1.9.3; version 0.2.1 only; version 0.3.0 only; version 0.3.1 only; version 0.3.2 only; version 0.3.3 only; …

Published 2013-02-24. Last modified 2026-06-16.