CVE-2016-6318

High

Published: 07/09/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in the FascistGecosUser function in the cracklib library allows local users to cause a denial of service (application crash) or gain privileges via a long GECOS field.

Risk Assessment

This vulnerability may lead to application crashes or privilege escalation, posing a significant security risk to the organization.

Recommendation

It is recommended to update the cracklib library to the latest version to mitigate this vulnerability and to monitor systems for potential exploitation attempts.

Other vulnerabilities in cracklib

CVE-1999-1140High
Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field.

Original NVD description (English source)

Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges via a long GECOS field, involving longbuffer.