The telnetd service in FreeBSD 9.3 10.1 10.2 10.3 and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a \sequence of memory allocation failures.\