CVE-2018-16745

CVE-2018-16745 is a buffer overflow vulnerability affecting mgetty versions prior to 1.2.1. Specifically, the mail_to parameter in the fax_notify_mail() function within faxrec.c is not properly sanitized, allowing for a buffer overflow if long, untrusted input is processed. This vulnerability carries a high CVSS score of 7.8, indicating a significant risk with potential for high impact on confidentiality, integrity, and availability, and can be exploited locally with low attack complexity and no user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.