Inetutils

inetutils

Vendor: Gnu • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-32772 1Gnu 1Inetutils Jun 17, 2026 Mar 16, 2026 N/A· v4 4.7 MEDIUM· v3 N/A· v2 telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.
CVE-2026-32746 1Gnu 1Inetutils Jun 17, 2026 Mar 13, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.
CVE-2026-28372 1Gnu 1Inetutils Jun 17, 2026 Feb 27, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-linux in release 2.40. This is related to...Show more telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALS_DIRECTORY environment variable, and requires an unprivileged local user to create a login.noauth file.Show less
CVE-2026-24061 2Debian Gnu 2Debian Linux Inetutils Jun 17, 2026 Jan 21, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
CVE-2023-40303 1Gnu 1Inetutils Jun 17, 2026 Aug 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of setid() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call...Show more GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of setid() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary user control the activities of the process.Show less
CVE-2022-39028 4Debian GnuMit+1 more 4Debian Linux InetutilsKerberos 5+1 more Jun 17, 2026 Aug 30, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the te...Show more telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available through inetd. However, if the telnetd application has many crashes within a short time interval, the telnet service would become unavailable after inetd logs a "telnet/tcp server failing (looping), service terminated" error. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.Show less
CVE-2021-40491 2Debian Gnu 2Debian Linux Inetutils Jun 17, 2026 Sep 3, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address. This is similar to CVE-2020-8284 for curl.
CVE-2011-4862 8Debian FedoraprojectFreebsd+5 more 10Debian Linux FedoraFreebsd+7 more Apr 29, 2026 Dec 25, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products a...Show more Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.Show less