CVE-2018-16743

Name of the Vulnerable Software and Affected Versions mgetty versions prior to 1.2.1

Description An issue was discovered in the contrib/next-login/login.c file, where the command-line parameter username is passed unsanitized to the strcpy() function, which can cause a stack-based buffer overflow.

Recommendations For versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the login functionality to minimize the risk of exploitation. Avoid using the username parameter in the affected login functionality until the issue is resolved.