Lucene search
+L

71 matches found

osv_cleanstart
osv_cleanstart
•added 2026/10/31 2:28 p.m.•13 views

CLEANSTART-2024-UG80570 Stack-based buffer overflow in the FascistGecosUser function in lib/fascist

Security vulnerability affects the cracklib package. Stack-based buffer overflow in the FascistGecosUser function in lib/fascist...

7.8CVSS6.7AI score0.00741EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/03/06 12:00 a.m.•18 views

NewStart CGSL MAIN 6.06 (SP) : cracklib Vulnerability (NS-SA-2026-0019)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has cracklib packages installed that are affected by a vulnerability: - Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service application crash or gain...

7.8CVSS6.9AI score0.00741EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2007-1397

Malware in sbrugna...

6.9CVSS6.4AI score0.00788EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-1999-1121

Malware in sbrugna...

7.2CVSS6.4AI score0.00434EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/09/30 12:00 a.m.•15 views

NewStart CGSL MAIN 6.06 : cracklib Vulnerability (NS-SA-2025-0214)

The remote NewStart CGSL host, running version MAIN 6.06, has cracklib packages installed that are affected by a vulnerability: - Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service application crash or gain...

7.8CVSS6.9AI score0.00741EPSS
SaveExploits0References3
osv_opensuse
osv_opensuse
•added 2024/06/15 12:00 a.m.•6 views

OPENSUSE-SU-2024:10359-1 cracklib-2.9.5-2.6 on GA media

These are all security issues fixed in the cracklib-2.9.5-2.6 package on the GA media of openSUSE Tumbleweed...

7.8CVSS6.5AI score0.00741EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•24 views

RHEL 7 : cracklib (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - cracklib: Stack-based buffer overflow when parsing large GECOS field CVE-2016-6318 Note that Nessus has not tested...

7.8CVSS6.7AI score0.00741EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•24 views

RHEL 5 : cracklib (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - cracklib: Stack-based buffer overflow when parsing large GECOS field CVE-2016-6318 Note that Nessus has not tested...

7.8CVSS6.7AI score0.00741EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/05/11 12:00 a.m.•17 views

RHEL 6 : cracklib (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - cracklib: Stack-based buffer overflow when parsing large GECOS field CVE-2016-6318 Note that Nessus has not tested...

6.7AI score0.00741EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/01/17 12:00 a.m.•28 views

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : PAM vulnerability (USN-6588-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6588-1 advisory. Matthias Gerstner discovered that the PAM pamnamespace module incorrectly handled special files when performing directory checks. A...

5.5CVSS6.4AI score0.00459EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2023/02/15 4:59 a.m.•17 views

SUSE CVE-2016-6318

Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service application crash or gain privileges via a long GECOS field, involving longbuffer...

7.8CVSS6.6AI score0.00741EPSS
SaveExploits0References24
Rockylinux
Rockylinux
•added 2022/05/17 8:03 a.m.•29 views

new packages: cracklib

An update is available for cracklib. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

2.2AI score
SaveExploits0
osv_ghsa
osv_ghsa
•added 2022/05/17 5:52 a.m.•29 views

GHSA-WJJC-M3FC-FCM8 MoinMoin Denial of Service vulnerability via password_checker function

The passwordchecker function in config/multiconfig.py in MoinMoin prior to version 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service segmentation fault and crash via unknown vectors...

8.7CVSS6.2AI score0.01484EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2022/05/17 5:52 a.m.•36 views

MoinMoin Denial of Service vulnerability via password_checker function

The passwordchecker function in config/multiconfig.py in MoinMoin prior to version 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service segmentation fault and crash via unknown vectors...

5CVSS7.1AI score0.01484EPSS
SaveExploits1References5Affected Software1
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•19 views

Mageia: Security Advisory (MGASA-2016-0302)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00741EPSS
SaveExploits0References4
Veracode
Veracode
•added 2021/10/26 2:49 a.m.•41 views

Denial Of Service (DoS)

cracklib is vulnerable to denial of service. The vulnerability exists because of a stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib when parsing large GECOS field...

7.8CVSS4.9AI score0.00741EPSS
SaveExploits0References18Affected Software1
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•28 views

SUSE: Security Advisory (SUSE-SU-2016:2211-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6AI score0.00741EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•22 views

SUSE: Security Advisory (SUSE-SU-2016:2107-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6AI score0.00741EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•32 views

Huawei EulerOS: Security Advisory for cracklib (EulerOS-SA-2019-2439)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00741EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/12/04 12:00 a.m.•42 views

EulerOS 2.0 SP2 : cracklib (EulerOS-SA-2019-2439)

According to the version of the cracklib packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - CrackLib tests passwords to determine whether they match certain security-oriented characteristics, with the purpose of stopping users from...

7.8CVSS6.5AI score0.00741EPSS
SaveExploits0References2
Rows per page
Query Builder