CyberRota Analysis
AI-GeneratedA vulnerability exists in the SSSD's NSS responder due to inadequate validation of the addrlen field in the sss_nss_protocol_parse_addr() function. This flaw allows a local attacker to exploit the NSS responder socket through a specially crafted GETHOSTBYADDR request, leading to an out-of-bounds read and potential denial of service. Organizations utilizing SSSD should prioritize patching this vulnerability to mitigate the risk of service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and process crash, resulting in a denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)