CVE-2013-0220

The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.

• fedoraproject sssd (<= 1.9.3) • fedoraproject sssd 0.2.1 • fedoraproject sssd 0.3.0 • fedoraproject sssd 0.3.1 • fedoraproject sssd 0.3.2 • fedoraproject sssd 0.3.3 • fedoraproject sssd 0.4.0 • fedoraproject sssd 0.4.1 • fedoraproject sssd 0.5.0 • fedoraproject sssd 0.6.0 • fedoraproject sssd 0.6.1 • fedoraproject sssd 0.7.0 • fedoraproject sssd 0.7.1 • fedoraproject sssd 0.99.0 • fedoraproject sssd 0.99.1 • fedoraproject sssd 1.0.0 • fedoraproject sssd 1.0.1 • fedoraproject sssd 1.0.2 • fedoraproject sssd 1.0.3 • fedoraproject sssd 1.0.4 • fedoraproject sssd 1.0.5 • fedoraproject sssd 1.0.6 • fedoraproject sssd 1.0.99 • fedoraproject sssd 1.1.0 • fedoraproject sssd 1.1.1 • fedoraproject sssd 1.1.2 • fedoraproject sssd 1.1.91 • fedoraproject sssd 1.1.92 • fedoraproject sssd 1.2.0 • fedoraproject sssd 1.2.1 • fedoraproject sssd 1.2.2 • fedoraproject sssd 1.2.3 • fedoraproject sssd 1.2.4 • fedoraproject sssd 1.2.91 • fedoraproject sssd 1.3.0 • fedoraproject sssd 1.3.1 • fedoraproject sssd 1.4.0 • fedoraproject sssd 1.4.1 • fedoraproject sssd 1.5.0 • fedoraproject sssd 1.5.1 • fedoraproject sssd 1.5.2 • fedoraproject sssd 1.5.3 • fedoraproject sssd 1.5.4 • fedoraproject sssd 1.5.5 • fedoraproject sssd 1.5.6 • fedoraproject sssd 1.5.6.1 • fedoraproject sssd 1.5.7 • fedoraproject sssd 1.5.8 • fedoraproject sssd 1.5.9 • fedoraproject sssd 1.5.10 • fedoraproject sssd 1.5.11 • fedoraproject sssd 1.5.12 • fedoraproject sssd 1.5.13 • fedoraproject sssd 1.5.14 • fedoraproject sssd 1.5.15 • fedoraproject sssd 1.5.16 • fedoraproject sssd 1.5.17 • fedoraproject sssd 1.6.0 • fedoraproject sssd 1.6.1 • fedoraproject sssd 1.6.2 … and 13 more