Bug 551754

Summary: Buffer overflow in open_tty()
Product: [Fedora] Fedora Reporter: Michael Breuer <mbreuer>
Component: mingettyAssignee: Petr Pisar <ppisar>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 12CC: ppisar, rrakus
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: mingetty-1.08-5.fc14 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 640940 (view as bug list) Environment:
Last Closed: 2010-10-30 23:44:30 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Michael Breuer 2010-01-01 18:35:39 UTC 
Description of problem:

Mingetty open_tty() allocates a 40 byte buffer for the name of the tty to open. The tty name passed on the command line is not checked for length.
Version-Release number of selected component (if applicable):

Not sure if this is a security issue as mingetty is not suid. But should still be fixed.
Comment 1 Petr Pisar 2010-10-26 15:52:00 UTC 
All Fedoras affected.
Comment 2 Fedora Update System 2010-10-26 16:45:14 UTC 
mingetty-1.08-5.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/mingetty-1.08-5.fc14
Comment 3 Fedora Update System 2010-10-26 16:45:55 UTC 
mingetty-1.08-5.fc13 has been submitted as an update for Fedora 13.
https://admin.fedoraproject.org/updates/mingetty-1.08-5.fc13
Comment 4 Fedora Update System 2010-10-26 16:46:16 UTC 
mingetty-1.08-5.fc12 has been submitted as an update for Fedora 12.
https://admin.fedoraproject.org/updates/mingetty-1.08-5.fc12
Comment 5 Fedora Update System 2010-10-27 22:29:24 UTC 
mingetty-1.08-5.fc12 has been pushed to the Fedora 12 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update mingetty'.  You can provide feedback for this update here: https://admin.fedoraproject.org/updates/mingetty-1.08-5.fc12
Comment 6 Fedora Update System 2010-10-30 23:44:20 UTC 
mingetty-1.08-5.fc12 has been pushed to the Fedora 12 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 7 Fedora Update System 2010-11-01 20:59:27 UTC 
mingetty-1.08-5.fc13 has been pushed to the Fedora 13 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 8 Fedora Update System 2010-11-04 23:31:34 UTC 
mingetty-1.08-5.fc14 has been pushed to the Fedora 14 stable repository.  If problems still persist, please make note of it in this bug report.