VULNERABILITY INTELLIGENCE

CVE-2015-5292

CVSS score6.8 MEDIUM

EPSS probability3.67%

CISA KEVNot currently listed

Published2015-10-29

Last modified2026-06-17

Description

Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote authenticated users to cause a denial of service (memory consumption) via a large number of logins that trigger parsing of PAC blobs during Kerberos authentication.