CVE-2020-10188

telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code

Published Mar 6, 2020 CVSS 3.1 · 9.8 Critical EPSS 74.3% KEV · Not listed
Description
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-2176-1 inetutils security update
Debian DLA Debian DLA DLA-2341-1 inetutils security update
EUVD EUVD EUVD-2020-2649 utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
Ubuntu USN Ubuntu USN USN-5048-1 Inetutils vulnerability
Ubuntu USN Ubuntu USN USN-5048-2 Inetutils vulnerability
Ubuntu USN Ubuntu USN USN-7781-1 Inetutils vulnerabilities