Debian Cracklib2 vulnerabilities

1 known vulnerability affecting debian/cracklib2.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2016-6318HIGHCVSS 7.8fixed in cracklib2 2.9.2-2 (bookworm)2016

CVE-2016-6318 [HIGH] CVE-2016-6318: cracklib2 - Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in... Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges via a long GECOS field, involving longbuffer. Scope: local bookworm: resolved (fixed in 2.9.2-2) bullseye: resolved (fixed in 2.9.2-2) forky: resolved (fixed in 2.9.2-2) sid: resolved (fixed