A stack buffer overflow vulnerability exists in SSSD's conversion of X.509 certificate RSA public keys to SSH keys due to missing size checks on RSA components. An attacker who can supply a certificate with oversized RSA components that passes configured certificate checks may cause denial of service and memory corruption in the SSH responder. No arbitrary code execution has been demonstrated. Exploitation requires influence over certificate data and satisfying certificate verification requirements.