CVE-2018-16743

Опубликовано: 13 сент. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

An issue was discovered in mgetty before 1.2.1. In contrib/next-login/login.c, the command-line parameter username is passed unsanitized to strcpy(), which can cause a stack-based buffer overflow.

Ссылки

https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
Exploit
Third Party Advisory
https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mgetty_project:mgetty:*:*:*:*:*:*:*:*

Версия до 1.2.1 (исключая)

EPSS

Процентиль: 20%

0.00063

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2018-16743

CVSS3: 7.8

ubuntu

больше 7 лет назад

An issue was discovered in mgetty before 1.2.1. In contrib/next-login/login.c, the command-line parameter username is passed unsanitized to strcpy(), which can cause a stack-based buffer overflow.

CVE-2018-16743

CVSS3: 2.9

redhat

больше 7 лет назад

An issue was discovered in mgetty before 1.2.1. In contrib/next-login/login.c, the command-line parameter username is passed unsanitized to strcpy(), which can cause a stack-based buffer overflow.

CVE-2018-16743

CVSS3: 7.8

debian

больше 7 лет назад

An issue was discovered in mgetty before 1.2.1. In contrib/next-login/ ...

GHSA-63wf-289m-vgw6

CVSS3: 7.8

github

больше 3 лет назад

An issue was discovered in mgetty before 1.2.1. In contrib/next-login/login.c, the command-line parameter username is passed unsanitized to strcpy(), which can cause a stack-based buffer overflow.

openSUSE-SU-2018:3108-1

suse-cvrf

больше 7 лет назад

Security update for mgetty

EPSS

Процентиль: 20%

0.00063

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-787