Bug 1629973 (CVE-2018-16743) - CVE-2018-16743 mgetty: Stack-based buffer overflow with long username in contrib/next-login/login.c
Summary: CVE-2018-16743 mgetty: Stack-based buffer overflow with long username in cont...
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2018-16743
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1629974
Blocks: 1629987
TreeView+ depends on / blocked
 
Reported: 2018-09-17 17:34 UTC by Pedro Sampaio
Modified: 2021-02-16 23:02 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2018-10-10 13:48:53 UTC
Embargoed:

Attachments (Terms of Use)

Description Pedro Sampaio 2018-09-17 17:34:11 UTC 
An issue was discovered in mgetty before 1.2.1. In contrib/next-login/login.c, the command-line parameter username is passed unsanitized to strcpy(), which can cause a stack-based buffer overflow.

References:

https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
Comment 1 Pedro Sampaio 2018-09-17 17:34:39 UTC 
Created mgetty tracking bugs for this issue:

Affects: fedora-all [bug 1629974]
Comment 2 Riccardo Schirone 2018-09-19 13:18:42 UTC 
Statement:

This issue did not affect the versions of mgetty as shipped with Red Hat Enterprise Linux 5, 6 and 7 as they did not include the patched login binary provided by mgetty.
Note You need to log in before you can comment on or make changes to this bug.