This vulnerability in the sssd NSS responder allows a local attacker to cause an out-of-bounds read by sending specially crafted service lookup requests to the NSS responder's UNIX socket. The out-of-bounds read can lead to a denial of service by crashing the NSS responder process. The vulnerability does not allow privilege escalation or reliable data disclosure. Exploitation requires local access to the UNIX socket, which is typically accessible to unprivileged local clients. The underlying parser bug remains, but exposure can be reduced by restricting socket access.

The primary impact is a denial of service due to the NSS responder process crashing from an out-of-bounds read. There is no evidence that this vulnerability leads to privilege escalation or confidential data disclosure. The attack requires local access to the UNIX socket, limiting the attack vector to local users or processes.

To reduce exposure, restrict access to the SSSD NSS responder UNIX socket (/var/lib/sss/pipes/nss) to trusted local clients by enforcing stricter socket permissions or explicit UID restrictions. Changes to socket permissions may require restarting the SSSD service. Note that this mitigation reduces attack surface but does not fix the underlying parser bug. Patch status is not yet confirmed — check the Red Hat advisory for current remediation guidance.