CWE Code: 399
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Resource Management Errors
Summary: memory leak in the privilege attribute certificate (pac) responder plugin (sssd_pac_plugin.so) in system security services daemon (sssd) 1.10 before 1.13.1 allows remote authenticated users to cause a denial of service (memory consumption) via a large number of logins that trigger parsing of pac blobs during kerberos authentication.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/NONE/COMPLETE
Published Date: 2015-10-29
Last Modified Date: 2016-12-07