Buffer Overflow Vulnerability in SSSD Affecting RSA Public Key Conversion
CVE-2026-127099
5.9MEDIUM
What is CVE-2026-127099?
A vulnerability in SSSD's handling of X.509 certificate RSA public keys can lead to a stack buffer overflow. This issue arises from inadequate size checks when copying RSA components into fixed-size stack buffers. An attacker capable of providing an oversized RSA component certificate that successfully passes the existing validation checks can potentially cause a denial of service and manipulate the memory of the SSH responder.
References
CVSS V3.1
Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Priyank Nigam (Microsoft Cloud Security) for reporting this issue.