Read the docs

Cracklib Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Cracklib Project records in CISA KEV

No Cracklib Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 35

Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges via a long GECOS field, involving longbuffe…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00741 Published 2016-09-07 Will not fix CWE-787
Open these records in search →