Threats tagged 'ghsa-9jhh-xxq5-xmxj'

A flaw in SSSD's PAM responder allows a local attacker to send an authentication request without negotiating the client protocol version, causing a NULL pointer dereference and crashing the responder. This results in denial of service for SSSD-backed authentication. The vulnerability requires local access to the PAM responder socket and does not impact confidentiality or integrity.