CyberRota Analysis
AI-GeneratedA vulnerability in the System Security Services Daemon (SSSD) allows local attackers to exploit pre-authentication requests that retain state in memory, leading to unbounded memory consumption. This can result in Denial of Service (DoS) by degrading or terminating SSSD authentication services. Organizations utilizing SSSD with Identity Provider authentication should prioritize addressing this issue to mitigate potential service disruptions.
Original NVD Description
A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. A local attacker can repeatedly initiate authentication flows without completing them, causing unbounded memory consumption. This memory exhaustion can lead to a Denial of Service (DoS) by degrading or terminating SSSD authentication services.
Related CVEs
Other vulnerabilities affecting the same vendor(s)