The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0 1.4.x and 1.3 allows local users to cause a denial of service (infinite loop crash and login prevention) via a crafted packet.