Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS-2020-1387
HistoryJun 23, 2020 - 6:42 a.m.

Important: telnet

2020-06-2306:42:00
alas.aws.amazon.com
44

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.833

Percentile

98.5%

JSON

Issue Overview:

utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions. (CVE-2020-10188)

Affected Packages:

telnet

Issue Correction:
Run yum update telnet to update your system.

New Packages:

i686:  
    telnet-0.17-49.9.amzn1.i686  
    telnet-server-0.17-49.9.amzn1.i686  
    telnet-debuginfo-0.17-49.9.amzn1.i686  
  
src:  
    telnet-0.17-49.9.amzn1.src  
  
x86_64:  
    telnet-debuginfo-0.17-49.9.amzn1.x86_64  
    telnet-server-0.17-49.9.amzn1.x86_64  
    telnet-0.17-49.9.amzn1.x86_64

Additional References

Red Hat: CVE-2020-10188

Mitre: CVE-2020-10188

Related

openvas 19
nessus 41
prion 1
redhat 7
debian 2
broadcom 1
mageia 2
fedora 3
nvd 1
oraclelinux 4
osv 4
cisco 1
checkpoint_advisories 1
cve 1
paloalto 1
centos 2
f5 1
ubuntu 2
amazon 1
cvelist 1
arista 1
ubuntucve 1
debiancve 1
redhatcve 1
cisa 1
veracode 1
archlinux 1
jvn 1
oracle 1
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0169)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-2341-1)
2020-08-25 00:00:00
Huawei EulerOS: Security Advisory for telnet (EulerOS-SA-2020-1765)
2020-07-03 00:00:00
nessus
nessus
RHEL 8 : telnet (RHSA-2020:1318)
2020-04-07 00:00:00
EulerOS 2.0 SP3 : telnet (EulerOS-SA-2020-2065)
2020-09-28 00:00:00
Debian DLA-2176-1 : inetutils security update
2020-05-15 00:00:00
prion
prion
Buffer overflow
2020-03-06 15:15:00
redhat
redhat
(RHSA-2020:1342) Important: telnet security update
2020-04-07 07:01:47
(RHSA-2022:0011) Important: telnet security update
2022-01-04 07:56:18
(RHSA-2020:1335) Important: telnet security update
2020-04-06 14:39:35
debian
debian
[SECURITY] [DLA 2341-1] inetutils security update
2020-08-24 09:10:08
[SECURITY] [DLA 2176-1] inetutils security update
2020-05-14 12:31:09
broadcom
broadcom
BSA-2021-1013
2021-07-10 00:00:00
mageia
mageia
Updated krb5-appl packages fix security vulnerability
2020-04-15 13:12:14
Updated netkit-telnet packages fix security vulnerability
2020-05-15 18:48:04
fedora
fedora
[SECURITY] Fedora 30 Update: telnet-0.17-77.fc30
2020-04-04 04:19:03
[SECURITY] Fedora 31 Update: telnet-0.17-78.fc31
2020-04-04 03:23:08
[SECURITY] Fedora 32 Update: telnet-0.17-79.fc32
2020-04-01 16:35:49
nvd
nvd
CVE-2020-10188
2020-03-06 15:15:14
oraclelinux
oraclelinux
telnet security update
2020-04-07 00:00:00
telnet security update
2020-04-11 00:00:00
krb5-appl security update
2020-04-13 00:00:00
osv
osv
inetutils vulnerability
2021-08-20 17:56:24
inetutils - security update
2020-04-14 00:00:00
inetutils vulnerability
2021-08-19 19:14:10
cisco
cisco
Telnet Vulnerability Affecting Cisco Products: June 2020
2020-06-24 16:00:00
checkpoint_advisories
checkpoint_advisories
Netkit Telnet Buffer Overflow (CVE-2020-10188)
2020-12-27 00:00:00
cve
cve
CVE-2020-10188
2020-03-06 15:15:14
paloalto
paloalto
PAN-OS: Impact of Telnet Remote-Code-Execution (RCE) Vulnerability (CVE-2020-10188)
2021-09-08 16:00:00
centos
centos
krb5 security update
2020-04-08 15:29:38
telnet security update
2020-04-08 15:30:05
f5
f5
K22130301 : Telnet vulnerability CVE-2020-10188
2020-05-07 00:00:00
ubuntu
ubuntu
Inetutils vulnerability
2021-08-19 00:00:00
Inetutils vulnerability
2021-08-20 00:00:00
amazon
amazon
Important: telnet
2020-05-05 01:20:00
cvelist
cvelist
CVE-2020-10188
2020-03-06 14:07:21
arista
arista
Security Advisory 0048
2020-05-13 00:00:00
ubuntucve
ubuntucve
CVE-2020-10188
2020-03-06 00:00:00
debiancve
debiancve
CVE-2020-10188
2020-03-06 15:15:14
redhatcve
redhatcve
CVE-2020-10188
2020-03-09 15:41:07
cisa
cisa
Cisco Releases Security Advisory for Telnet Vulnerability in IOS XE Software
2020-06-25 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2022-01-14 06:00:46
archlinux
archlinux
[ASA-202106-20] inetutils: arbitrary code execution
2021-06-09 00:00:00
jvn
jvn
JVN#96561229: Multiple vulnerabilities in Operation management interface of FUJITSU Network IPCOM
2022-05-09 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.833

Percentile

98.5%

JSON
Related for ALAS-2020-1387
openvas19nessus41prion1redhat7debian2broadcom1mageia2fedora3nvd1oraclelinux4osv4cisco1checkpoint_advisories1cve1paloalto1centos2f51ubuntu2amazon1cvelist1arista1ubuntucve1debiancve1redhatcve1cisa1veracode1archlinux1jvn1oracle1