Every CVESearch/Get API key

CVE-2010-4341

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD...

2.1 LowFix available

CVE-2010-4341 is a low vulnerability (CVSS 2.1) in Fedorahosted Sssd, published January 25, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. Fixed in sssd 1.2.1-4.1.

What does this mean?
Severity
2.1 LowCVSS 2.0, NVD
Exploit chance
0.49%EPSS, 42nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.2.1-4.1sssd +23 more

Description

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.

Exploit likelihood

0.49%Down 1.1 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sssd
Debian:12
before 1.2.1-4.1
1.2.1-4.1
sssd
Debian:13
before 1.2.1-4.1
1.2.1-4.1
sssd
Debian:14
before 1.2.1-4.1
1.2.1-4.1
sssd
Red Hat:enterprise_linux:6::client
before 0:1.5.1-34.el6
0:1.5.1-34.el6
sssd-debuginfo
Red Hat:enterprise_linux:6::client
before 0:1.5.1-34.el6
0:1.5.1-34.el6
sssd-tools
Red Hat:enterprise_linux:6::client
before 0:1.5.1-34.el6
0:1.5.1-34.el6
sssd-client
Red Hat:enterprise_linux:6::client
before 0:1.5.1-34.el6
0:1.5.1-34.el6
sssd
Red Hat:enterprise_linux:6::server
before 0:1.5.1-34.el6
0:1.5.1-34.el6
sssd-debuginfo
Red Hat:enterprise_linux:6::server
before 0:1.5.1-34.el6
0:1.5.1-34.el6
sssd-tools
Red Hat:enterprise_linux:6::server
before 0:1.5.1-34.el6
0:1.5.1-34.el6
Show 14 moreShow less
Affected packages
PackageAffectedFixed
sssd-client
Red Hat:enterprise_linux:6::server
before 0:1.5.1-34.el6
0:1.5.1-34.el6
sssd
Red Hat:enterprise_linux:6::workstation
before 0:1.5.1-34.el6
0:1.5.1-34.el6
sssd-debuginfo
Red Hat:enterprise_linux:6::workstation
before 0:1.5.1-34.el6
0:1.5.1-34.el6
sssd-tools
Red Hat:enterprise_linux:6::workstation
before 0:1.5.1-34.el6
0:1.5.1-34.el6
sssd-client
Red Hat:enterprise_linux:6::workstation
before 0:1.5.1-34.el6
0:1.5.1-34.el6
sssd
Red Hat:enterprise_linux:5::client
before 0:1.5.1-37.el5
0:1.5.1-37.el5
sssd-client
Red Hat:enterprise_linux:5::client
before 0:1.5.1-37.el5
0:1.5.1-37.el5
sssd-debuginfo
Red Hat:enterprise_linux:5::client
before 0:1.5.1-37.el5
0:1.5.1-37.el5
sssd-tools
Red Hat:enterprise_linux:5::client
before 0:1.5.1-37.el5
0:1.5.1-37.el5
sssd
Red Hat:enterprise_linux:5::server
before 0:1.5.1-37.el5
0:1.5.1-37.el5
sssd-client
Red Hat:enterprise_linux:5::server
before 0:1.5.1-37.el5
0:1.5.1-37.el5
sssd-debuginfo
Red Hat:enterprise_linux:5::server
before 0:1.5.1-37.el5
0:1.5.1-37.el5
sssd-tools
Red Hat:enterprise_linux:5::server
before 0:1.5.1-37.el5
0:1.5.1-37.el5
sssd
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
before 1.14.2-3.1
1.14.2-3.1

What each source reports

NVD Score used2.1

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.

Record
CVE-2010-4341
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE ListNo score

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.

Record
CVE-2010-4341
Updated
2026-11-02
EUVDEUVD-2010-4310No score

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.

Record
EUVD-2010-4310
Updated
2026-11-03
GitHub AdvisoriesGHSA-qfqv-cr9x-27pgNo score

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD...

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.

Record
GHSA-qfqv-cr9x-27pg
Updated
2026-11-02
OSVNo score

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.

Record
CVE-2010-4341
Updated
2026-11-02
OSVDEBIAN-CVE-2010-4341No score

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.

Record
DEBIAN-CVE-2010-4341
Updated
2026-11-07
OSVopenSUSE-SU-2024:10427-1No score

libipa_hbac-devel-1.14.2-3.1 on GA media

These are all security issues fixed in the libipa_hbac-devel-1.14.2-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10427-1
Updated
2026-11-02

History

History
RecordedChangedSources
affectedOSV
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 115 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open