中 5.9

A flaw was found in SSSD's conversion of X.509 certificate RSA public keys to SSH keys. Missing...

CVE-2026-127099 SecPulse初出 2:54

原文の説明取得元が公開している説明をそのまま載せています (多くは英語)。

A flaw was found in SSSD's conversion of X.509 certificate RSA public keys to SSH keys. Missing size checks before copying RSA components into fixed-size stack buffers can cause a stack buffer overflow. An attacker able to supply a certificate with oversized RSA components that passes the configured certificate checks can cause denial of service and corrupt SSH responder memory.

出典: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

参照URL

web secalert@redhat.com
web secalert@redhat.com
web nvd.nist.gov
web github.com