CVE-2015-5292
Fixed in a distro release EPSS 4%
Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote authenticated users to cause a denial of service (memory consumption) via a large number of logins that trigger parsing of PAC blobs during Kerberos authentication.
Products: fedoraproject sssd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sssd | 1.13.1-1 |
| Debian 13 | sssd | 1.13.1-1 |
| Red Hat Enterprise Linux 6 | libipa_hbac | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | libipa_hbac-devel | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | libipa_hbac-python | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | libsss_idmap | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | libsss_idmap-devel | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | libsss_nss_idmap | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | libsss_nss_idmap-devel | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | libsss_nss_idmap-python | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | libsss_simpleifp | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | libsss_simpleifp-devel | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | python-sssdconfig | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | sssd | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | sssd-ad | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | sssd-client | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | sssd-common | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | sssd-common-pac | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | sssd-dbus | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | sssd-debuginfo | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | sssd-ipa | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | sssd-krb5 | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | sssd-krb5-common | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | sssd-ldap | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | sssd-proxy | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 6 | sssd-tools | 0:1.12.4-47.el6_7.4 |
| Red Hat Enterprise Linux 7 | libipa_hbac | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | libipa_hbac-devel | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | libsss_idmap | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | libsss_idmap-devel | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | libsss_nss_idmap | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | libsss_nss_idmap-devel | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | libsss_simpleifp | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | libsss_simpleifp-devel | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | python-libipa_hbac | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | python-libsss_nss_idmap | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | python-sss | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | python-sss-murmur | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | python-sssdconfig | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-ad | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-client | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-common | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-common-pac | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-dbus | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-debuginfo | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-ipa | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-krb5 | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-krb5-common | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-ldap | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-libwbclient | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-libwbclient-devel | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-proxy | 0:1.13.0-40.el7 |
| Red Hat Enterprise Linux 7 | sssd-tools | 0:1.13.0-40.el7 |