[Secure-testing-team] Bug#834502: cracklib2: CVE-2016-6318: Stack-based buffer overflow when parsing large GECOS field

Salvatore Bonaccorso carnil at debian.org
Tue Aug 16 11:53:38 UTC 2016


Source: cracklib2
Version: 2.9.2-1
Severity: important
Tags: security upstream

Hi,

the following vulnerability was published for cracklib2.

CVE-2016-6318[0]:
Stack-based buffer overflow when parsing large GECOS field

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-6318

Regards,
Salvatore



More information about the Secure-testing-team mailing list