Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges via a long GECOS field, involving longbuffer. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6318