The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a "sequence of memory allocation failures."
https://www.freebsd.org/security/advisories/FreeBSD-SA-16:36.telnetd.asc