Lucene search

K

Veracode Vulnerability DatabaseVERACODE:33645

HistoryJan 14, 2022 - 6:00 a.m.

Remote Code Execution (RCE)

2022-01-1406:00:46

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

248

telnet

vulnerability

remote code execution

boundary check

EPSS

0.833

Percentile

98.5%

telnet is vulnerable to remote code execution. The vulnerability exists due to a lack of check on the boundary of Nextitem() Function. This vulnerability exists in the telnet-server package, not in the telnet client-side package.

References

access.redhat.com/errata/RHSA-2022:0011

access.redhat.com/security/updates/classification/#important

appgateresearch.blogspot.com/2020/02/bravestarr-fedora-31-netkit-telnetd_28.html

bugzilla.redhat.com/show_bug.cgi?id=1811673

github.com/krb5/krb5-appl/blob/d00cd671dfe945791b33d4f1f6a5c57ae1667ef8/telnet/telnetd/utility.c#L205-L216

lists.debian.org/debian-lts-announce/2020/05/msg00012.html

lists.debian.org/debian-lts-announce/2020/08/msg00038.html

lists.fedoraproject.org/archives/list/[email protected]/message/7FMTRRQTYKWZD2GMXX3GLZV46OLPCLVK/

lists.fedoraproject.org/archives/list/[email protected]/message/HLU6FL24BSQQEB2SJC26NLJ2MANQDA7M/

lists.fedoraproject.org/archives/list/[email protected]/message/K3VJ6V2Z3JRNJOBVHSOPMAC76PSSKG6A/

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-telnetd-EFJrEzPx

www.arista.com/en/support/advisories-notices/security-advisories/10702-security-advisory-48

www.oracle.com/security-alerts/cpuApr2021.html

EPSS

0.833

Percentile

98.5%

Related for VERACODE:33645