CVE-2016-6318

Name of the Vulnerable Software and Affected Versions cracklib (affected versions not specified)

Description The issue is related to a stack-based buffer overflow in the FascistGecosUser function, located in lib/fascist.c. This overflow can be triggered by a long GECOS field, which involves a long buffer. As a result, local users may cause a denial of service, leading to an application crash, or potentially gain privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.