Summary
It was discovered that telnetd in GNU Inetutils incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash. This issue
only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS (CVE-2022-39028)
It was discovered that Inetutils incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information,
or execute arbitrary code.
(CVE-2023-40303)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | inetutils | 2:1.9.4-11ubuntu0.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | inetutils | 2:2.2-2ubuntu0.1 |
Vulnerabilities 2
-
Unscored —
telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference …
-
Unscored —
GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions…