SSSD PAM responder Heap Overflow via Unvalidated auth_token_length (CVE-2026-68743)

Vulnerability Overview Vulnerability ID: Bug 2509760 (CVE-2026-68743) Vulnerability Type: SSSD PAM responder out-of-bounds read vulnerability Description: In the SSSD PAM responder, the function does not validate the field when processing client requests. This leads to accessing uninitialized memory while processing tokens, resulting in a heap buffer overflow. Impact Scope Affected Product: Security Response Affected Component: vulnerability Affected Versions: Not specified Affected Hardware: All Affected Operating Systems: Linux Priority: Medium Severity: Medium Target Milestone: None Assigned To: Product Security DevOps Team Remediation Plan Remediation Status: Not fixed Remediation Version: Not specified Remediation Environment: Not specified Last Closed: Not specified Marked As: Not specified Additional Information Report Time: 2026-07-31 12:31:13 UTC by OSIDB Bzimport Modified Time: 2026-08-03 07:35 UTC CC List: 3 users URL: Not provided White List: Not provided Dependencies: Not provided Blocking Items: Not provided Tree View: depends on / blocked Detailed Description Vulnerability Details: In the SSSD PAM responder, the function fails to validate the field when processing client requests. This causes access to uninitialized memory during token processing, leading to a heap buffer overflow. An attacker can exploit this vulnerability by sending crafted protocol v1 authentication requests, causing the PAM responder to crash and resulting in a denial of service. Attack Vector: A local attacker can trigger this vulnerability by connecting to the writable PAM responder socket ( ) and sending crafted protocol v1 authentication requests. Remediation Advice: Fix the function to ensure that the field is validated before processing tokens. POC Code No POC Code Other Information Keywords: Security Status: NEW Alias: CVE-2026-68743 QA Contact: Not provided Docs Contact: Not provided Dependencies: Not provided Blocking Items: Not provided Tree View: depends on / blocked Comments Comment: Login is required to comment on or modify this bug. Attachments Attachment: Not provided Description Description: Provides a detailed description of the specific vulnerability situation and exploitation methods. Comments Comment: Login is required to comment on or modify this bug. Attachments Attachment: Not provided Description Description: Provides a detailed description of the specific vulnerability situation and exploitation methods. Comments Comment: Login is required to comment on or modify this bug. Attachments Attachment: Not provided Description Description: Provides a detailed description of the specific vulnerability situation and exploitation methods. Comments Comment: Login is required to comment on or modify this bug. Attachments Attachment: Not provided Description Description: Provides a detailed description of the specific vulnerability situation and exploitation methods. Comments Comment: Login is required to comment on or modify this bug. Attachments Attachment: Not provided Description Description: Provides a detailed description of the specific vulnerability situation and exploitation methods. Comments Comment: Login is required to comment on or modify this bug. Attachments Attachment: Not provided Description Description: Provides a detailed description of the specific vulnerability situation and exploitation methods. Comments Comment: Login is required to comment on or modify this bug. Attachments Attachment: Not provided Description Description: Provides a detailed description of the specific vulnerability situation and exploitation methods. Comments Comment: Login is required to comment on or modify this bug. Attachments Attachment: Not provided Description Description: Provides a detailed description of the specific vulnerability situation and exploitation methods. Comments Comment: Login is required to comment on or modify this bug. Attachments Attachment: Not provided Description Description: Provides a detailed description of the specific vulnerability situation and exploitation methods. Comments Comment: Login is required to comment on or modify this bug. Attachments Attachment: Not provided Description Description: Provides a detailed description of the specific vulnerability situation and exploitation methods. Comments Comment: Login is required to comment on or modify this bug. Attachments Attachment: Not provided Description Description: Provides a detailed description of the specific vulnerability situation and exploitation methods. Comments Comment: Login is required to comment on or modify this bug. Attachments Attachment: Not provided Description Description: Provides a detailed description of the specific vulnerability situation and exploitation methods. Comments Comment: Login is required to comment on or modify this bug. Attachments Attachment: Not provided Description Description: Provides a detailed description of the specific vulnerability situation and exploitation methods. Comments Com

Goal Reached Thanks to every supporter — we hit 100%!

SSSD PAM responder Heap Overflow via Unvalidated auth_token_length (CVE-2026-68743)

More from this source