suse · CVE-2018-16742

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2018-16742 severity low: SUSE including 15 source package names (g3utils-1.1.36-28.3.1, g3utils-1.1.36-58.3.1, …), 55 product×package rows across 30 product lines (SUSE Linux Enterprise Desktop 12 SP3, SUSE Linux Enterprise Desktop 12 SP4, … (30 product lines)): Fixed 55.

Description:

An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow can be triggered via a command-line parameter.