Red Hat Security AdvisoryRHSA-2022:0011
telnet security update
Released 2022-01-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.6) telnet-1:0.17-65.el7_6, telnet-server-1:0.17-65.el7_6
- Red Hat Enterprise Linux Server E4S (v. 7.6) telnet-1:0.17-65.el7_6, telnet-server-1:0.17-65.el7_6
- Red Hat Enterprise Linux Server TUS (v. 7.6) telnet-1:0.17-65.el7_6, telnet-server-1:0.17-65.el7_6
Fixes 1 record
Priority HIGH 81
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.74339 · Published 2020-03-06 · Partial fix CWE-120
