System Security Services Daemon Out-of-Bounds Read Vulnerability in PAM Passkey Responder Leading to Local Denial-of-Service

An out-of-bounds read vulnerability has been identified in the System Security Services Daemon (SSSD) within the PAM passkey responder. The issue arises because the pam_passkey_child_read_data() function improperly manages raw bytes from a pipe, treating them as NUL-terminated C strings without proper termination. This flaw can be exploited by a local attacker who sends a crafted passkey authentication request, causing the SSSD PAM responder to crash and leading to a local denial-of-service condition.

Impact

Exploitation of this vulnerability causes the SSSD service to crash, disrupting authentication processes and potentially leading to resource consumption issues.