CVE-2026-127099
MEDIUM
NVD
CVSS Score
5.9
Severity
MEDIUM
Published
Nov 12, 2026
Vendor
unknown
Description
A flaw was found in SSSD's conversion of X.509 certificate RSA public keys to SSH keys. Missing size checks before copying RSA components into fixed-size stack buffers can cause a stack buffer overflow. An attacker able to supply a certificate with oversized RSA components that passes the configured certificate checks can cause denial of service and corrupt SSH responder memory.