PT-2018-13717 · Mgetty+2 · Mgetty+2

Eric Sesterhenn

·

Publicado

2018-09-13

·

Atualizado

2024-08-14

·

CVE-2018-16743

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions mgetty versions prior to 1.2.1
Description An issue was discovered in the contrib/next-login/login.c file, where the command-line parameter username is passed unsanitized to the strcpy() function, which can cause a stack-based buffer overflow.
Recommendations For versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the login functionality to minimize the risk of exploitation. Avoid using the username parameter in the affected login functionality until the issue is resolved.

Exploit

Correção

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALT-PU-2020-3522
ALT-PU-2020-3533
ALT-PU-2024-11129
CVE-2018-16743
MGASA-2018-0402
OPENSUSE-SU-2018_2942-1
OPENSUSE-SU-2018_3108-1
OPENSUSE-SU-2024:11047-1
SUSE-SU-2018:2850-1
SUSE-SU-2018:2894-1
SUSE-SU-2018:2979-1

Produtos afetados

Alt Linux
Suse
Mgetty