Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-10188: utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions. 1811673: CVE-2020-10188 telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | telnet | 1:0.17-65.amzn2 |
| Amazon Linux · 2 | telnet-debuginfo | 1:0.17-65.amzn2 |
| Amazon Linux · 2 | telnet-server | 1:0.17-65.amzn2 |
Vulnerabilities 1
-
Unscored —CVE-2020-10188 EPSS 74%
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes o…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2020-10188.html