262 matches found
CVE-2019-1010190
mgetty prior to 1.2.1 is affected by: out-of-bounds read. The impact is: DoS, the program may crash if the memory is not mapped. The component is: putwhitespan in g3/pbm2g3.c. The attack vector is: Local, the victim must open a specially crafted file. The fixed version is: 1.2.1...
UBUNTU-CVE-2019-1010190
mgetty prior to 1.2.1 is affected by: out-of-bounds read. The impact is: DoS, the program may crash if the memory is not mapped. The component is: putwhitespan in g3/pbm2g3.c. The attack vector is: Local, the victim must open a specially crafted file. The fixed version is: 1.2.1...
CVE-2019-1010190
CVE-2019-1010190 affects mgetty prior to 1.2.1. The vulnerability is an out-of-bounds read in putwhitespan() (g3/pbm2g3.c) that can cause DoS and a potential crash if memory is not mapped. The attack is local and requires the victim to open a specially crafted file. The fixed version is 1.2.1. Th...
CVE-2019-1010190
mgetty prior to 1.2.1 is affected by: out-of-bounds read. The impact is: DoS, the program may crash if the memory is not mapped. The component is: putwhitespan in g3/pbm2g3.c. The attack vector is: Local, the victim must open a specially crafted file. The fixed version is: 1.2.1...
CVE-2019-1010190
mgetty prior to 1.2.1 is affected by: out-of-bounds read. The impact is: DoS, the program may crash if the memory is not mapped. The component is: putwhitespan in g3/pbm2g3.c. The attack vector is: Local, the victim must open a specially crafted file. The fixed version is: 1.2.1...
PT-2019-11502 · Mgetty +2 · Mgetty +2
Name of the Vulnerable Software and Affected Versions: mgetty versions prior to 1.2.1 Description: The issue is related to an out-of-bounds read, which can cause a denial of service DoS and potentially crash the program if the memory is not mapped. This is due to the putwhitespan function in...
PT-2019-11501 · Mgetty +1 · Mgetty +1
Name of the Vulnerable Software and Affected Versions: mgetty versions prior to 1.2.1 Description: The issue is related to an infinite loop, which can cause a denial of service DoS as the program never terminates. This is due to a problem in the g3/g32pbm.c component. The attack vector is local,...
mgetty denial of service vulnerability
mgetty is a modem handler. A denial of service vulnerability exists in the g3/g32pbm.c file in versions prior to mgetty 1.2.1, which can be exploited by an attacker to cause a denial of service infinite loop with the help of a specially crafted file...
Fedora Update for mgetty FEDORA-2019-da586db907
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : mgetty (openSUSE-2019-737)
This update for mgetty fixes the following issues : - CVE-2018-16741: The function doactivate did not properly sanitize shell metacharacters to prevent command injection bsc1108752. - CVE-2018-16745: The mailto parameter was not sanitized, leading to a buffer overflow if long untrusted input...
[SECURITY] Fedora 29 Update: mgetty-1.1.37-11.fc29
The mgetty package contains a "smart" getty which allows logins over a serial line i.e., through a modem. If you're using a Class 2 or 2.0 modem, mgetty can receive faxes. If you also need to send faxes, you'll need to install the sendfax program. If you'll be dialing in to your system using a...
[SECURITY] Fedora 28 Update: mgetty-1.1.37-10.fc28
The mgetty package contains a "smart" getty which allows logins over a serial line i.e., through a modem. If you're using a Class 2 or 2.0 modem, mgetty can receive faxes. If you also need to send faxes, you'll need to install the sendfax program. If you'll be dialing in to your system using a...
Fedora Update for mgetty FEDORA-2019-3d38ab031e
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 28 : mgetty (2019-3d38ab031e)
Security fix for CVE-2018-16741,CVE-2018-16744,CVE-2018-16745 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 29 : mgetty (2019-da586db907)
Security fix for CVE-2018-16741,CVE-2018-16744,CVE-2018-16745 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
SUSE SLED15 / SLES15 Security Update : mgetty (SUSE-SU-2018:2894-1)
This update for mgetty fixes the following issues : CVE-2018-16741: The function doactivate did not properly sanitize shell metacharacters to prevent command injection bsc1108752. CVE-2018-16745: The mailto parameter was not sanitized, leading to a buffer overflow if long untrusted input reached ...
openSUSE: Security Advisory for mgetty (openSUSE-SU-2018:2942-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Updated mgetty packages fix security vulnerabilities
Updated mgetty packages fix security vulnerabilities: The function doactivate did not properly sanitize shell metacharacters to prevent command injection CVE-2018-16741. Stack-based buffer overflow that could have been triggered via a command-line parameter CVE-2018-16742. The command-line...
MGASA-2018-0402 Updated mgetty packages fix security vulnerabilities
Updated mgetty packages fix security vulnerabilities: The function doactivate did not properly sanitize shell metacharacters to prevent command injection CVE-2018-16741. Stack-based buffer overflow that could have been triggered via a command-line parameter CVE-2018-16742. The command-line...
openSUSE Security Update : mgetty (openSUSE-2018-1144)
This update for mgetty fixes the following issues : - CVE-2018-16741: Fixed a command injection in fax/faxq-helper.c boo1108752 - CVE-2018-16742: Stack-based buffer overflow in contrib/scrts.c triggered via command line parameter boo1108762 - CVE-2018-16743: Stack-based buffer overflow with long...