Red Hat Security AdvisoryRHSA-2020:1334
telnet security update
Released 2020-04-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) telnet-1:0.17-65.el7_8, telnet-server-1:0.17-65.el7_8
- Red Hat Enterprise Linux ComputeNode (v. 7) telnet-1:0.17-65.el7_8, telnet-server-1:0.17-65.el7_8
- Red Hat Enterprise Linux Server (v. 7) telnet-1:0.17-65.el7_8, telnet-server-1:0.17-65.el7_8
- Red Hat Enterprise Linux Workstation (v. 7) telnet-1:0.17-65.el7_8, telnet-server-1:0.17-65.el7_8
Fixes 1 record
Priority HIGH 81
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.74339 · Published 2020-03-06 · Partial fix CWE-120
