Page MenuHomeVyOS Platform
Create Task
Maniphest T8867

libnss-mapuser: pre-auth heap overflow in pwcopy() - remote root sshd monitor crash on systems with RADIUS login
Closed, ResolvedPublic
Actions

Description

pwcopy in map_common.c of https://github.com/VyOS/libnss-mapuser has wrong calculation of needlen that can lead to crash.

Details

Version
-
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

hedrok created this task.May 14 2026, 2:16 PM
hedrok triaged this task as High priority.
hedrok created this object in space S1 VyOS Public.
hedrok created this object with visibility "Administrators".
hedrok added a comment.Tue, Sep 8, 7:47 AM

PR: https://github.com/vyos/libnss-mapuser/pull/33

Viacheslav changed the visibility from "Administrators" to "All Users".Tue, Sep 8, 3:15 PM
Viacheslav changed the visibility from "All Users" to "Public (No Login Required)".
Viacheslav closed this task as Resolved.Tue, Sep 8, 4:17 PM
Viacheslav moved this task from Need Triage to Completed on the VyOS Rolling board.