Summary
USN-7992-1 fixed vulnerabilities in telnetd in Inetutils. This update
provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,
and Ubuntu 20.04 LTS.
Original advisory details:
Kyu Neushwaistein discovered that telnetd in Inetutils incorrectly handled
certain environment variables. A remote attacker could use this issue to
bypass authentication and open a session as an administrator.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | inetutils | 2:1.9.4-1ubuntu0.1~esm5 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | inetutils | 2:1.9.4-3ubuntu0.1+esm4 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | inetutils | 2:1.9.4-11ubuntu0.2+esm3 |
References
-
report
https://ubuntu.com/security/CVE-2026-24061