Lucene search
HistoryMar 06, 2020 - 3:15 p.m.
CVE-2020-10188
telnetd
netkit
telnet
buffer overflow
cve-2020-10188
security vulnerability
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.9 High
AI Score
Confidence
High
0.833 High
EPSS
Percentile
98.5%
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
Affected configurations
Node
netkit_telnet_projectnetkit_telnetRange≤0.17
Node
fedoraprojectfedoraMatch30
ORfedoraprojectfedoraMatch31
ORfedoraprojectfedoraMatch32
Node
debiandebian_linuxMatch8.0
ORdebiandebian_linuxMatch9.0
Node
aristaeosRange≤4.20.15
ORaristaeosRange4.21.0–4.21.10m
ORaristaeosRange4.22–4.22.4m
ORaristaeosRange4.23–4.23.3m
ORaristaeosMatch4.24.0f
Node
oraclecommunications_performance_intelligence_centerMatch10.4.0.2
Node
juniperjunosMatch12.3-
ORjuniperjunosMatch12.3r1
ORjuniperjunosMatch12.3r10
ORjuniperjunosMatch12.3r10-s1
ORjuniperjunosMatch12.3r10-s2
ORjuniperjunosMatch12.3r11
ORjuniperjunosMatch12.3r12
ORjuniperjunosMatch12.3r12-s1
ORjuniperjunosMatch12.3r12-s10
ORjuniperjunosMatch12.3r12-s11
ORjuniperjunosMatch12.3r12-s12
ORjuniperjunosMatch12.3r12-s13
ORjuniperjunosMatch12.3r12-s14
ORjuniperjunosMatch12.3r12-s15
ORjuniperjunosMatch12.3r12-s3
ORjuniperjunosMatch12.3r12-s4
ORjuniperjunosMatch12.3r12-s6
ORjuniperjunosMatch12.3r12-s8
ORjuniperjunosMatch12.3r13
ORjuniperjunosMatch12.3r2
ORjuniperjunosMatch12.3r3
ORjuniperjunosMatch12.3r4
ORjuniperjunosMatch12.3r5
ORjuniperjunosMatch12.3r6
ORjuniperjunosMatch12.3r7
ORjuniperjunosMatch12.3r8
ORjuniperjunosMatch12.3r9
ORjuniperjunosMatch12.3r12
ORjuniperjunosMatch12.3x48-
ORjuniperjunosMatch12.3x48d10
ORjuniperjunosMatch12.3x48d100
ORjuniperjunosMatch12.3x48d15
ORjuniperjunosMatch12.3x48d20
ORjuniperjunosMatch12.3x48d25
ORjuniperjunosMatch12.3x48d30
ORjuniperjunosMatch12.3x48d35
ORjuniperjunosMatch12.3x48d40
ORjuniperjunosMatch12.3x48d45
ORjuniperjunosMatch12.3x48d50
ORjuniperjunosMatch12.3x48d51
ORjuniperjunosMatch12.3x48d55
ORjuniperjunosMatch12.3x48d60
ORjuniperjunosMatch12.3x48d65
ORjuniperjunosMatch12.3x48d66
ORjuniperjunosMatch12.3x48d70
ORjuniperjunosMatch12.3x48d75
ORjuniperjunosMatch12.3x48d80
ORjuniperjunosMatch12.3x48d85
ORjuniperjunosMatch12.3x48d90
ORjuniperjunosMatch12.3x48d95
ORjuniperjunosMatch12.3x50-
ORjuniperjunosMatch12.3x50d20
ORjuniperjunosMatch12.3x50d30
ORjuniperjunosMatch12.3x50d35
ORjuniperjunosMatch12.3x50d40
ORjuniperjunosMatch12.3x50d45
ORjuniperjunosMatch15.1-
ORjuniperjunosMatch15.1a1
ORjuniperjunosMatch15.1f
ORjuniperjunosMatch15.1f1
ORjuniperjunosMatch15.1f2
ORjuniperjunosMatch15.1f2-s1
ORjuniperjunosMatch15.1f2-s2
ORjuniperjunosMatch15.1f2-s3
ORjuniperjunosMatch15.1f2-s4
ORjuniperjunosMatch15.1f3
ORjuniperjunosMatch15.1f4
ORjuniperjunosMatch15.1f5
ORjuniperjunosMatch15.1f5-s7
ORjuniperjunosMatch15.1f6
ORjuniperjunosMatch15.1f6-s1
ORjuniperjunosMatch15.1f6-s10
ORjuniperjunosMatch15.1f6-s12
ORjuniperjunosMatch15.1f6-s2
ORjuniperjunosMatch15.1f6-s3
ORjuniperjunosMatch15.1f6-s4
ORjuniperjunosMatch15.1f6-s5
ORjuniperjunosMatch15.1f6-s6
ORjuniperjunosMatch15.1f6-s7
ORjuniperjunosMatch15.1f6-s8
ORjuniperjunosMatch15.1f6-s9
ORjuniperjunosMatch15.1f7
ORjuniperjunosMatch15.1r
ORjuniperjunosMatch15.1r1
ORjuniperjunosMatch15.1r2
ORjuniperjunosMatch15.1r3
ORjuniperjunosMatch15.1r4
ORjuniperjunosMatch15.1r4-s7
ORjuniperjunosMatch15.1r4-s8
ORjuniperjunosMatch15.1r4-s9
ORjuniperjunosMatch15.1r5
ORjuniperjunosMatch15.1r5-s1
ORjuniperjunosMatch15.1r5-s3
ORjuniperjunosMatch15.1r5-s5
ORjuniperjunosMatch15.1r5-s6
ORjuniperjunosMatch15.1r6
ORjuniperjunosMatch15.1r6-s1
ORjuniperjunosMatch15.1r6-s2
ORjuniperjunosMatch15.1r6-s3
ORjuniperjunosMatch15.1r6-s4
ORjuniperjunosMatch15.1r6-s6
ORjuniperjunosMatch15.1r7
ORjuniperjunosMatch15.1r7-s1
ORjuniperjunosMatch15.1r7-s2
ORjuniperjunosMatch15.1r7-s3
ORjuniperjunosMatch15.1r7-s4
ORjuniperjunosMatch15.1r7-s5
ORjuniperjunosMatch15.1r7-s6
ORjuniperjunosMatch15.1x49-
ORjuniperjunosMatch15.1x49d10
ORjuniperjunosMatch15.1x49d100
ORjuniperjunosMatch15.1x49d110
ORjuniperjunosMatch15.1x49d120
ORjuniperjunosMatch15.1x49d130
ORjuniperjunosMatch15.1x49d131
ORjuniperjunosMatch15.1x49d140
ORjuniperjunosMatch15.1x49d15
ORjuniperjunosMatch15.1x49d150
ORjuniperjunosMatch15.1x49d160
ORjuniperjunosMatch15.1x49d170
ORjuniperjunosMatch15.1x49d180
ORjuniperjunosMatch15.1x49d190
ORjuniperjunosMatch15.1x49d20
ORjuniperjunosMatch15.1x49d200
ORjuniperjunosMatch15.1x49d210
ORjuniperjunosMatch15.1x49d25
ORjuniperjunosMatch15.1x49d30
ORjuniperjunosMatch15.1x49d35
ORjuniperjunosMatch15.1x49d40
ORjuniperjunosMatch15.1x49d45
ORjuniperjunosMatch15.1x49d50
ORjuniperjunosMatch15.1x49d55
ORjuniperjunosMatch15.1x49d60
ORjuniperjunosMatch15.1x49d65
ORjuniperjunosMatch15.1x49d70
ORjuniperjunosMatch15.1x49d75
ORjuniperjunosMatch15.1x49d80
ORjuniperjunosMatch15.1x49d90
ORjuniperjunosMatch15.1x49-d30
ORjuniperjunosMatch15.1x49-d60
ORjuniperjunosMatch15.1x49-d140
ORjuniperjunosMatch15.1x49-d150
ORjuniperjunosMatch15.1x49-d160
ORjuniperjunosMatch16.1-
ORjuniperjunosMatch16.1r
ORjuniperjunosMatch16.1r1
ORjuniperjunosMatch16.1r2
ORjuniperjunosMatch16.1r3
ORjuniperjunosMatch16.1r3-s10
ORjuniperjunosMatch16.1r3-s11
ORjuniperjunosMatch16.1r3-s8
ORjuniperjunosMatch16.1r4
ORjuniperjunosMatch16.1r4-s12
ORjuniperjunosMatch16.1r4-s2
ORjuniperjunosMatch16.1r4-s3
ORjuniperjunosMatch16.1r4-s4
ORjuniperjunosMatch16.1r4-s6
ORjuniperjunosMatch16.1r4-s8
ORjuniperjunosMatch16.1r4-s9
ORjuniperjunosMatch16.1r5
ORjuniperjunosMatch16.1r5-s4
ORjuniperjunosMatch16.1r6
ORjuniperjunosMatch16.1r6-s1
ORjuniperjunosMatch16.1r6-s3
ORjuniperjunosMatch16.1r6-s4
ORjuniperjunosMatch16.1r6-s6
ORjuniperjunosMatch16.1r7
ORjuniperjunosMatch16.1r7-s2
ORjuniperjunosMatch16.1r7-s3
ORjuniperjunosMatch16.1r7-s4
ORjuniperjunosMatch16.1r7-s5
ORjuniperjunosMatch16.1r7-s6
ORjuniperjunosMatch16.1r7-s7
ORjuniperjunosMatch17.2-
ORjuniperjunosMatch17.2r1
ORjuniperjunosMatch17.2r1-s1
ORjuniperjunosMatch17.2r1-s2
ORjuniperjunosMatch17.2r1-s3
ORjuniperjunosMatch17.2r1-s4
ORjuniperjunosMatch17.2r1-s5
ORjuniperjunosMatch17.2r1-s6
ORjuniperjunosMatch17.2r1-s7
ORjuniperjunosMatch17.2r1-s8
ORjuniperjunosMatch17.2r2
ORjuniperjunosMatch17.2r2-s11
ORjuniperjunosMatch17.2r2-s4
ORjuniperjunosMatch17.2r2-s6
ORjuniperjunosMatch17.2r2-s7
ORjuniperjunosMatch17.2r3
ORjuniperjunosMatch17.2r3-s1
ORjuniperjunosMatch17.2r3-s2
ORjuniperjunosMatch17.2r3-s3
ORjuniperjunosMatch17.2x75-
ORjuniperjunosMatch17.3-
ORjuniperjunosMatch17.3r1
ORjuniperjunosMatch17.3r1-s1
ORjuniperjunosMatch17.3r1-s4
ORjuniperjunosMatch17.3r2
ORjuniperjunosMatch17.3r2-s1
ORjuniperjunosMatch17.3r2-s2
ORjuniperjunosMatch17.3r2-s3
ORjuniperjunosMatch17.3r2-s4
ORjuniperjunosMatch17.3r2-s5
ORjuniperjunosMatch17.3r3
ORjuniperjunosMatch17.3r3-
ORjuniperjunosMatch17.3r3-s1
ORjuniperjunosMatch17.3r3-s2
ORjuniperjunosMatch17.3r3-s3
ORjuniperjunosMatch17.3r3-s4
ORjuniperjunosMatch17.3r3-s5
ORjuniperjunosMatch17.3r3-s6
ORjuniperjunosMatch17.3r3-s7
ORjuniperjunosMatch17.3r3-s8
ORjuniperjunosMatch17.4-
ORjuniperjunosMatch17.4r1
ORjuniperjunosMatch17.4r1-s1
ORjuniperjunosMatch17.4r1-s2
ORjuniperjunosMatch17.4r1-s3
ORjuniperjunosMatch17.4r1-s4
ORjuniperjunosMatch17.4r1-s5
ORjuniperjunosMatch17.4r1-s6
ORjuniperjunosMatch17.4r1-s7
ORjuniperjunosMatch17.4r2
ORjuniperjunosMatch17.4r2-s1
ORjuniperjunosMatch17.4r2-s10
ORjuniperjunosMatch17.4r2-s2
ORjuniperjunosMatch17.4r2-s3
ORjuniperjunosMatch17.4r2-s4
ORjuniperjunosMatch17.4r2-s5
ORjuniperjunosMatch17.4r2-s6
ORjuniperjunosMatch17.4r2-s7
ORjuniperjunosMatch17.4r2-s8
ORjuniperjunosMatch17.4r2-s9
ORjuniperjunosMatch17.4r3
ORjuniperjunosMatch17.4r3-s1
ORjuniperjunosMatch18.1-
ORjuniperjunosMatch18.1r1
ORjuniperjunosMatch18.1r2
ORjuniperjunosMatch18.1r2-s1
ORjuniperjunosMatch18.1r2-s2
ORjuniperjunosMatch18.1r2-s4
ORjuniperjunosMatch18.1r3
ORjuniperjunosMatch18.1r3-s1
ORjuniperjunosMatch18.1r3-s2
ORjuniperjunosMatch18.1r3-s3
ORjuniperjunosMatch18.1r3-s4
ORjuniperjunosMatch18.1r3-s5
ORjuniperjunosMatch18.1r3-s6
ORjuniperjunosMatch18.1r3-s7
ORjuniperjunosMatch18.1r3-s8
ORjuniperjunosMatch18.1r3-s9
ORjuniperjunosMatch18.2-
ORjuniperjunosMatch18.2r
ORjuniperjunosMatch18.2r1
ORjuniperjunosMatch18.2r1-
ORjuniperjunosMatch18.2r1-s2
ORjuniperjunosMatch18.2r1-s3
ORjuniperjunosMatch18.2r1-s4
ORjuniperjunosMatch18.2r1-s5
ORjuniperjunosMatch18.2r2
ORjuniperjunosMatch18.2r2-s1
ORjuniperjunosMatch18.2r2-s2
ORjuniperjunosMatch18.2r2-s3
ORjuniperjunosMatch18.2r2-s4
ORjuniperjunosMatch18.2r2-s5
ORjuniperjunosMatch18.2r2-s6
ORjuniperjunosMatch18.2r2-s7
ORjuniperjunosMatch18.2r2-s8
ORjuniperjunosMatch18.2r3
ORjuniperjunosMatch18.2r3-s1
ORjuniperjunosMatch18.2r3-s2
ORjuniperjunosMatch18.2r3-s3
ORjuniperjunosMatch18.2r3-s4
ORjuniperjunosMatch18.2x75-
ORjuniperjunosMatch18.2x75d12
ORjuniperjunosMatch18.2x75d20
ORjuniperjunosMatch18.2x75d30
ORjuniperjunosMatch18.2x75d40
ORjuniperjunosMatch18.2x75d411
ORjuniperjunosMatch18.2x75d50
ORjuniperjunosMatch18.2x75d51
ORjuniperjunosMatch18.2x75d60
ORjuniperjunosMatch18.2x75-d10
ORjuniperjunosMatch18.2x75-d30
ORjuniperjunosMatch18.3-
ORjuniperjunosMatch18.3r1
ORjuniperjunosMatch18.3r1-s1
ORjuniperjunosMatch18.3r1-s2
ORjuniperjunosMatch18.3r1-s3
ORjuniperjunosMatch18.3r1-s4
ORjuniperjunosMatch18.3r1-s5
ORjuniperjunosMatch18.3r1-s6
ORjuniperjunosMatch18.3r2
ORjuniperjunosMatch18.3r2-s1
ORjuniperjunosMatch18.3r2-s2
ORjuniperjunosMatch18.3r2-s3
ORjuniperjunosMatch18.3r3
ORjuniperjunosMatch18.3r3-s1
ORjuniperjunosMatch18.3r3-s2
ORjuniperjunosMatch18.4-
ORjuniperjunosMatch18.4r1
ORjuniperjunosMatch18.4r1-s1
ORjuniperjunosMatch18.4r1-s2
ORjuniperjunosMatch18.4r1-s3
ORjuniperjunosMatch18.4r1-s4
ORjuniperjunosMatch18.4r1-s5
ORjuniperjunosMatch18.4r1-s6
ORjuniperjunosMatch18.4r1-s7
ORjuniperjunosMatch18.4r2
ORjuniperjunosMatch18.4r2-s1
ORjuniperjunosMatch18.4r2-s2
ORjuniperjunosMatch18.4r2-s3
ORjuniperjunosMatch18.4r2-s4
ORjuniperjunosMatch18.4r3
ORjuniperjunosMatch18.4r3-s1
ORjuniperjunosMatch18.4r3-s2
ORjuniperjunosMatch18.4r3-s3
ORjuniperjunosMatch19.1-
ORjuniperjunosMatch19.1r1
ORjuniperjunosMatch19.1r1-s1
ORjuniperjunosMatch19.1r1-s2
ORjuniperjunosMatch19.1r1-s3
ORjuniperjunosMatch19.1r1-s4
ORjuniperjunosMatch19.1r1-s5
ORjuniperjunosMatch19.1r1-s6
ORjuniperjunosMatch19.1r2
ORjuniperjunosMatch19.1r2-s1
ORjuniperjunosMatch19.1r3
ORjuniperjunosMatch19.1r3-s1
ORjuniperjunosMatch19.2-
ORjuniperjunosMatch19.2r1
ORjuniperjunosMatch19.2r1-s1
ORjuniperjunosMatch19.2r1-s2
ORjuniperjunosMatch19.2r1-s3
ORjuniperjunosMatch19.2r1-s4
ORjuniperjunosMatch19.3-
ORjuniperjunosMatch19.3r1
ORjuniperjunosMatch19.3r1-s1
ORjuniperjunosMatch19.3r2
ORjuniperjunosMatch19.3r2-s1
ORjuniperjunosMatch19.3r2-s2
ORjuniperjunosMatch19.4-
ORjuniperjunosMatch19.4r1
ORjuniperjunosMatch19.4r1-s1
ORjuniperjunosMatch19.4r1-s2
ORjuniperjunosMatch19.4r2
ORjuniperjunosMatch20.1-
ORjuniperjunosMatch20.1r1
ORjuniperjunosMatch20.1r1-s1
| CPE | Name | Operator | Version |
|---|---|---|---|
| netkit_telnet_project:netkit_telnet | netkit telnet project netkit telnet | le | 0.17 |
References
appgateresearch.blogspot.com/2020/02/bravestarr-fedora-31-netkit-telnetd_28.html
github.com/krb5/krb5-appl/blob/d00cd671dfe945791b33d4f1f6a5c57ae1667ef8/telnet/telnetd/utility.c#L205-L216
lists.debian.org/debian-lts-announce/2020/05/msg00012.html
lists.debian.org/debian-lts-announce/2020/08/msg00038.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7FMTRRQTYKWZD2GMXX3GLZV46OLPCLVK/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HLU6FL24BSQQEB2SJC26NLJ2MANQDA7M/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3VJ6V2Z3JRNJOBVHSOPMAC76PSSKG6A/
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-telnetd-EFJrEzPx
www.arista.com/en/support/advisories-notices/security-advisories/10702-security-advisory-48
www.oracle.com/security-alerts/cpuApr2021.html
Social References
More
Related
nessus
nessus
Debian DLA-2176-1 : inetutils security update
2020-05-15 00:00:00
RHEL 7 : telnet (RHSA-2022:0011)
2022-01-04 00:00:00
EulerOS 2.0 SP3 : telnet (EulerOS-SA-2020-2065)
2020-09-28 00:00:00
mageia
mageia
Updated krb5-appl packages fix security vulnerability
2020-04-15 13:12:14
Updated netkit-telnet packages fix security vulnerability
2020-05-15 18:48:04
prion
prion
Buffer overflow
2020-03-06 15:15:00
openvas
openvas
Debian: Security Advisory (DLA-2341-1)
2020-08-25 00:00:00
Mageia: Security Advisory (MGASA-2020-0169)
2022-01-28 00:00:00
CentOS: Security Advisory for krb5-appl-clients (CESA-2020:1349)
2020-04-09 00:00:00
nvd
nvd
CVE-2020-10188
2020-03-06 15:15:14
debian
debian
[SECURITY] [DLA 2341-1] inetutils security update
2020-08-24 09:10:08
[SECURITY] [DLA 2176-1] inetutils security update
2020-05-14 12:31:09
fedora
fedora
[SECURITY] Fedora 30 Update: telnet-0.17-77.fc30
2020-04-04 04:19:03
[SECURITY] Fedora 32 Update: telnet-0.17-79.fc32
2020-04-01 16:35:49
[SECURITY] Fedora 31 Update: telnet-0.17-78.fc31
2020-04-04 03:23:08
broadcom
broadcom
BSA-2021-1013
2021-07-10 00:00:00
redhat
redhat
(RHSA-2020:1342) Important: telnet security update
2020-04-07 07:01:47
(RHSA-2022:0011) Important: telnet security update
2022-01-04 07:56:18
(RHSA-2022:0158) Important: telnet security update
2022-01-18 08:22:01
checkpoint_advisories
checkpoint_advisories
Netkit Telnet Buffer Overflow (CVE-2020-10188)
2020-12-27 00:00:00
osv
osv
inetutils vulnerability
2021-08-20 17:56:24
inetutils vulnerability
2021-08-19 19:14:10
inetutils - security update
2020-04-14 00:00:00
paloalto
paloalto
cisco
cisco
Telnet Vulnerability Affecting Cisco Products: June 2020
2020-06-24 16:00:00
oraclelinux
oraclelinux
telnet security update
2020-04-07 00:00:00
telnet security update
2020-04-11 00:00:00
telnet security update
2020-04-07 00:00:00
amazon
amazon
Important: telnet
2020-06-23 06:42:00
Important: telnet
2020-05-05 01:20:00
ubuntu
ubuntu
Inetutils vulnerability
2021-08-19 00:00:00
Inetutils vulnerability
2021-08-20 00:00:00
cvelist
cvelist
CVE-2020-10188
2020-03-06 14:07:21
centos
centos
telnet security update
2020-04-08 15:30:05
krb5 security update
2020-04-08 15:29:38
ubuntucve
ubuntucve
CVE-2020-10188
2020-03-06 00:00:00
arista
arista
Security Advisory 0048
2020-05-13 00:00:00
f5
f5
K22130301 : Telnet vulnerability CVE-2020-10188
2020-05-07 00:00:00
cisa
cisa
Cisco Releases Security Advisory for Telnet Vulnerability in IOS XE Software
2020-06-25 00:00:00
redhatcve
redhatcve
CVE-2020-10188
2020-03-09 15:41:07
debiancve
debiancve
CVE-2020-10188
2020-03-06 15:15:14
veracode
veracode
Remote Code Execution (RCE)
2022-01-14 06:00:46
archlinux
archlinux
[ASA-202106-20] inetutils: arbitrary code execution
2021-06-09 00:00:00
jvn
jvn
oracle
oracle
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.9 High
AI Score
Confidence
High
0.833 High
EPSS
Percentile
98.5%
Related for CVE-2020-10188