{"id":"CVE-2020-10188","aliases":["DEBIAN-CVE-2020-10188","DLA-2176-1","DLA-2341-1","EUVD-2020-2649","GHSA-8239-4cq6-qmwc","MGASA-2020-0169","MGASA-2020-0211","RHSA-2020:1318","RHSA-2020:1334","RHSA-2020:1335","RHSA-2020:1342","RHSA-2020:1349","RHSA-2022:0011","RHSA-2022:0158","SUSE-SU-2020:1533-1","UBUNTU-CVE-2020-10188","USN-5048-1","USN-5048-2","USN-7781-1"],"status":"published","title":"utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary...","description":"utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.74339,"percentile":0.99494,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2020-03-06T14:07:21Z","modified":"2026-10-26T12:01:11Z","fixes":[{"ecosystem":"Debian:12","package":"inetutils","fixed_in":["2:1.9.4-12"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"inetutils","fixed_in":["2:1.9.4-12"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"inetutils","fixed_in":["2:1.9.4-12"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"netkit-telnet-ssl","fixed_in":["0.17.17+0.1-2woody3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"netkit-telnet-ssl","fixed_in":["0.17.17+0.1-2woody3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"netkit-telnet-ssl","fixed_in":["0.17.17+0.1-2woody3"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"inetutils","fixed_in":["2:1.9.2.39.3a460-3+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"inetutils","fixed_in":["2:1.9.4-2+deb9u1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"krb5-appl","fixed_in":["1.0.3-10.1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"netkit-telnet","fixed_in":["0.17-18.1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"telnet","fixed_in":["1:0.17-73.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"telnet-server","fixed_in":["1:0.17-73.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"telnet","fixed_in":["1:0.17-65.el7_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"telnet-server","fixed_in":["1:0.17-65.el7_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"telnet","fixed_in":["1:0.17-65.el7_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"telnet-server","fixed_in":["1:0.17-65.el7_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"telnet","fixed_in":["1:0.17-65.el7_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"telnet-server","fixed_in":["1:0.17-65.el7_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"telnet","fixed_in":["1:0.17-65.el7_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"telnet-server","fixed_in":["1:0.17-65.el7_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"telnet","fixed_in":["1:0.17-49.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"telnet-server","fixed_in":["1:0.17-49.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"telnet","fixed_in":["1:0.17-49.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"telnet-server","fixed_in":["1:0.17-49.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"telnet","fixed_in":["1:0.17-49.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"telnet-server","fixed_in":["1:0.17-49.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"telnet","fixed_in":["1:0.17-49.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"telnet-server","fixed_in":["1:0.17-49.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"telnet","fixed_in":["1:0.17-73.el8_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"telnet-server","fixed_in":["1:0.17-73.el8_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-appl","fixed_in":["0:1.0.1-10.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-appl-servers","fixed_in":["0:1.0.1-10.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-appl","fixed_in":["0:1.0.1-10.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-appl-servers","fixed_in":["0:1.0.1-10.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-appl","fixed_in":["0:1.0.1-10.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-appl-servers","fixed_in":["0:1.0.1-10.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-appl","fixed_in":["0:1.0.1-10.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-appl-servers","fixed_in":["0:1.0.1-10.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"telnet","fixed_in":["1:0.17-65.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"telnet-debuginfo","fixed_in":["1:0.17-65.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"telnet-server","fixed_in":["1:0.17-65.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"telnet","fixed_in":["1:0.17-65.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"telnet-debuginfo","fixed_in":["1:0.17-65.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"telnet-server","fixed_in":["1:0.17-65.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"telnet","fixed_in":["1:0.17-65.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"telnet-debuginfo","fixed_in":["1:0.17-65.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"telnet-server","fixed_in":["1:0.17-65.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"telnet","fixed_in":["1:0.17-65.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"telnet-debuginfo","fixed_in":["1:0.17-65.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"telnet-server","fixed_in":["1:0.17-65.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"telnet","fixed_in":["1:0.17-65.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"telnet-debuginfo","fixed_in":["1:0.17-65.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"telnet-server","fixed_in":["1:0.17-65.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"telnet","fixed_in":["1:0.17-65.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"telnet-debuginfo","fixed_in":["1:0.17-65.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"telnet-server","fixed_in":["1:0.17-65.el7_7"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"krb5-appl","fixed_in":["1.0.3-3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"inetutils","fixed_in":["2:1.9.2-1ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"inetutils","fixed_in":["2:1.9.4-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"inetutils","fixed_in":["2:1.9.4-3ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"inetutils","fixed_in":["2:1.9.4-11ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-12"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-12"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-12"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"netkit-telnet-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.17+0.1-2woody3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"netkit-telnet-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.17+0.1-2woody3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"netkit-telnet-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.17+0.1-2woody3"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.2.39.3a460-3+deb8u1"}]}],"versions":["2:1.9.2.39.3a460-3"]},{"source":"osv","ecosystem":"Debian:9","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-2+deb9u1"}]}],"versions":["2:1.9.4-2"]},{"source":"osv","ecosystem":"Mageia:7","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-10.1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"netkit-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17-18.1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-73.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-73.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-49.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-49.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-49.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-49.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-49.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-49.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-49.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-49.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-73.el8_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-73.el8_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-appl-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-appl-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-appl-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-appl-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"telnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"telnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"telnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"telnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"telnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"telnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"telnet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.17-65.el7_7"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"krb5-appl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.2-1ubuntu0.1~esm2"}]}],"versions":["2:1.9.1.306-0a482-1","2:1.9.1.363-bbc1-1","2:1.9.2-1","2:1.9.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-1ubuntu0.1~esm1"}]}],"versions":["2:1.9.4-1","2:1.9.4-1build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"netkit-telnet-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.17.40+0.2-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-3ubuntu0.1"}]}],"versions":["2:1.9.4-2build1","2:1.9.4-3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"netkit-telnet-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.17.41+0.2-3","0.17.41+0.2-3build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-11ubuntu0.1"}]}],"versions":["2:1.9.4-10build1","2:1.9.4-11"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"netkit-telnet-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.17.41+0.2-3.2","0.17.41+0.2-3.2build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"netkit-telnet-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.17.41+0.2-3.3build1","0.17.41+0.2-3.3build2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"netkit-telnet-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.17.41+really0.17-4","0.17.41+really0.17-4build1","0.17.41+really0.17-4build2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"netkit-telnet-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.17.41+really0.17-5","0.17.41+really0.17-6"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"netkit-telnet-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.17.41+really0.17-7","0.17.41+really0.17-8","0.17.41+really0.17-8build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"netkit-telnet-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.17.41+really0.17-6","0.17.41+really0.17-7"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-3ubuntu0.1"}]}],"versions":["2:1.9.4-2build1","2:1.9.4-3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-11ubuntu0.1"}]}],"versions":["2:1.9.4-10build1","2:1.9.4-11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-1ubuntu0.1~esm1"}]}],"versions":["2:1.9.4-1","2:1.9.4-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.2-1ubuntu0.1~esm2"}]}],"versions":["2:1.9.1.306-0a482-1","2:1.9.1.363-bbc1-1","2:1.9.2-1","2:1.9.2-1ubuntu0.1~esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-1ubuntu0.1~esm3"}]}],"versions":["2:1.9.4-1","2:1.9.4-1build1","2:1.9.4-1ubuntu0.1~esm1","2:1.9.4-1ubuntu0.1~esm2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-3ubuntu0.1+esm2"}]}],"versions":["2:1.9.4-2build1","2:1.9.4-3","2:1.9.4-3ubuntu0.1","2:1.9.4-3ubuntu0.1+esm1"],"bundled":4}],"products":[{"vendor":"arista","product":"eos"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"juniper","product":"junos"},{"vendor":"netkit_telnet_project","product":"netkit_telnet"},{"vendor":"oracle","product":"communications_performance_intelligence_center"}],"references":[{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HLU6FL24BSQQEB2SJC26NLJ2MANQDA7M/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7FMTRRQTYKWZD2GMXX3GLZV46OLPCLVK/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3VJ6V2Z3JRNJOBVHSOPMAC76PSSKG6A/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00012.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-telnetd-EFJrEzPx","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00038.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://appgateresearch.blogspot.com/2020/02/bravestarr-fedora-31-netkit-telnetd_28.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://github.com/krb5/krb5-appl/blob/d00cd671dfe945791b33d4f1f6a5c57ae1667ef8/telnet/telnetd/utility.c#L205-L216","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/10702-security-advisory-48","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/01/20/8","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10188","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7FMTRRQTYKWZD2GMXX3GLZV46OLPCLVK"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HLU6FL24BSQQEB2SJC26NLJ2MANQDA7M"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3VJ6V2Z3JRNJOBVHSOPMAC76PSSKG6A"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7FMTRRQTYKWZD2GMXX3GLZV46OLPCLVK"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HLU6FL24BSQQEB2SJC26NLJ2MANQDA7M"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K3VJ6V2Z3JRNJOBVHSOPMAC76PSSKG6A"},{"url":"https://github.com/advisories/GHSA-8239-4cq6-qmwc"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-10188","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0169.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26451","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1349","tags":["web","advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0211.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26296","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1318","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1811673","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1318.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10188","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10188","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1334","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1334.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1335","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1335.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1342","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1342.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1349.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0011","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0011.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0158","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0158.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201533-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1165787","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10188","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-10188","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5048-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5048-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7781-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-0053","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-39028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-40303","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-10188","description":"utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.","status":"published","published":"2020-03-06T14:07:21Z","modified":"2026-01-21T01:32:48.733Z","updated_at":"2026-11-02T14:35:48.213211Z"}],"euvd":[{"id":"EUVD-2020-2649","description":"utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.","status":"published","published":"2020-03-06T14:07:21Z","modified":"2026-01-21T01:32:48Z","updated_at":"2026-11-02T19:48:49.964072Z"}],"ghsa":[{"id":"GHSA-8239-4cq6-qmwc","title":"utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary...","description":"utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.","status":"published","published":"2022-05-24T17:10:20Z","modified":"2026-01-21T03:31:26Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:05:50.116831Z"}],"nvd":[{"id":"CVE-2020-10188","description":"utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.","status":"published","published":"2020-03-06T15:15:14.02Z","modified":"2026-06-17T02:47:27.75Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:05:54.796125Z"}],"osv":[{"id":"CVE-2020-10188","description":"utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.","status":"published","published":"2020-03-06T15:15:14.02Z","modified":"2026-04-16T04:39:26.220164595Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"DEBIAN-CVE-2020-10188","description":"utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.","status":"published","published":"2020-03-06T15:15:14.02Z","modified":"2026-10-26T12:01:11.335229108Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"RHSA-2020:1318","title":"Red Hat Security Advisory: telnet security update","status":"published","published":"2024-09-16T03:49:39Z","modified":"2026-08-07T10:01:37Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1334","title":"Red Hat Security Advisory: telnet security update","status":"published","published":"2024-09-16T03:49:53Z","modified":"2026-08-07T10:01:38Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1335","title":"Red Hat Security Advisory: telnet security update","status":"published","published":"2024-09-16T03:49:46Z","modified":"2026-08-07T10:01:38Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1342","title":"Red Hat Security Advisory: telnet security update","status":"published","published":"2024-09-16T03:50:00Z","modified":"2026-08-07T10:01:39Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1349","title":"Red Hat Security Advisory: krb5-appl security update","status":"published","published":"2024-09-16T03:50:09Z","modified":"2026-08-07T10:01:39Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2022:0011","title":"Red Hat Security Advisory: telnet security update","status":"published","published":"2024-09-16T03:50:16Z","modified":"2026-08-07T10:04:34Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0158","title":"Red Hat Security Advisory: telnet security update","status":"published","published":"2024-09-16T03:50:24Z","modified":"2026-08-07T10:04:36Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"UBUNTU-CVE-2020-10188","description":"utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.","status":"published","published":"2020-03-06T15:15:00Z","modified":"2026-10-17T12:55:50.733319365Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"DLA-2176-1","title":"inetutils - security update","status":"published","published":"2020-04-14T00:00:00Z","modified":"2026-03-09T01:18:23.232619Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2341-1","title":"inetutils - security update","status":"published","published":"2020-08-24T00:00:00Z","modified":"2026-03-09T01:22:21.113147Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2020-0169","title":"Updated krb5-appl packages fix security vulnerability","description":"Updated krb5-appl packages fix security vulnerability:\n\nA vulnerability was found where incorrect bounds checks in the telnet\nserver’s (telnetd) handling of short writes and urgent data, could lead\nto information disclosure and corruption of heap data. An unauthenticated\nremote attacker could exploit these bugs by sending specially crafted\ntelnet packets to achieve arbitrary code execution in the telnet server\n(CVE-2020-10188).\n","status":"published","published":"2020-04-15T10:12:14Z","modified":"2026-04-16T04:41:14.176605456Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"MGASA-2020-0211","title":"Updated netkit-telnet packages fix security vulnerability","description":"Updated netkit-telnetd packages fix security vulnerability:\n\nA vulnerability was found where incorrect bounds checks in the telnet\nserver’s (telnetd) handling of short writes and urgent data, could lead\nto information disclosure and corruption of heap data. An unauthenticated\nremote attacker could exploit these bugs by sending specially crafted\ntelnet packets to achieve arbitrary code execution in the telnet server\n(CVE-2020-10188).\n","status":"published","published":"2020-05-15T15:48:04Z","modified":"2026-04-16T04:41:11.82657966Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"SUSE-SU-2020:1533-1","title":"Security update for krb5-appl","description":"This update for krb5-appl fixes the following issues:\n\n- CVE-2020-10188: Fixed a remote root execution (bsc#1165787).\n","status":"published","published":"2020-06-04T08:31:36Z","modified":"2025-05-02T04:09:32.935383Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-5048-1","title":"inetutils vulnerability","description":"It was discovered that Inetutils telnet server allows remote attackers to\nexecute arbitrary code via short writes or urgent data. An attacker could use\nthis vulnerability to cause a DoS or possibly execute arbitrary code.\n","status":"published","published":"2021-08-19T19:14:10Z","modified":"2026-04-27T15:55:59.362206Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5048-2","title":"inetutils vulnerability","description":"USN-5048-1 fixed a vulnerability in Inetutils for Ubuntu 18.04 LTS and Ubuntu\n20.04 LTS. This update provides the corresponding fixes for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that Inetutils telnet server allows remote attackers to\n execute arbitrary code via short writes or urgent data. An attacker could use\n this vulnerability to cause a DoS or possibly execute arbitrary code.\n","status":"published","published":"2021-08-20T17:56:24Z","modified":"2026-06-25T13:30:44.221360214Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-7781-1","title":"inetutils vulnerabilities","description":"Matthew Hickey discovered that Inetutils did not correctly handle certain\nescape characters. An attacker could possibly use this issue to cause a\ndenial of service. (CVE-2019-0053)\n\nIt was discovered that Inetutils did not correctly handle certain memory\noperations. An attacker could possibly use this issue to execute arbitrary\ncode. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-10188)\n\nIt was discovered that Inetutils did not correctly handle certain memory\noperations. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2022-39028)\n\nIt was discovered that Inetutils did not check the return values of set*id\nfunctions. An attacker could possibly use this issue to escalate their\nprivileges. (CVE-2023-40303)","status":"published","published":"2025-09-28T23:31:44Z","modified":"2026-06-25T13:32:31.266777965Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}