debian · CVE-2010-4341

Quick triage

Priority: not yet assigned Published: Updated: Mon, 22 Jun 2026 01:58:25 GMT

View at Official debian advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2010-4341 not yet assigned priority: Debian including 1 source packages (sssd), 4 status rows across 4 suites (bookworm, bullseye, sid, trixie): resolved 4.

Description:

The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.

cvelogic Threat Intelligence