Sssd: out-of-bounds read in the sssd

A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an out-of-bounds read when processed by functions like snprintf(). A local attacker could potentially trigger this vulnerability by initiating a crafted passkey authentication request, causing the SSSD PAM responder to crash, resulting in a local Denial of Service (DoS).

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

使用不正确的长度值访问缓冲区

Red Hat System Security Services Daemon 安全漏洞

Red Hat System Security Services Daemon是美国红帽（Red Hat）公司的一个Linux中的守护进程组件。 Red Hat System Security Services Daemon存在安全漏洞，该漏洞源于pam_passkey_child_read_data函数未正确处理管道原始字节，可能导致本地攻击者通过特制请求触发越界读取，造成拒绝服务。

N/A

N/A