DLA-191-1 checkpw - security update
Published
Unknown
Product
3 published CVES affecting debian/checkpw, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.