Red Hat Security AdvisoryRHSA-2020:1335
telnet security update
Released 2020-04-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) telnet-1:0.17-49.el6_10, telnet-server-1:0.17-49.el6_10
- Red Hat Enterprise Linux HPC Node (v. 6) telnet-1:0.17-49.el6_10, telnet-server-1:0.17-49.el6_10
- Red Hat Enterprise Linux Server (v. 6) telnet-1:0.17-49.el6_10, telnet-server-1:0.17-49.el6_10
- Red Hat Enterprise Linux Workstation (v. 6) telnet-1:0.17-49.el6_10, telnet-server-1:0.17-49.el6_10
Fixes 1 record
Priority HIGH 81
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.74339 · Published 2020-03-06 · Partial fix CWE-120
