Home

CVE-2020-10188

Description

utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
8.404

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2020:1334) telnet security update telnet-0.17-65.el7_8.x86_64.rpmLinux
(RHSA-2020:1334) telnet security update telnet-server-0.17-65.el7_8.x86_64.rpmLinux
(RHSA-2020:1335) telnet security update telnet-0.17-49.el6_10.i686.rpmLinux
(RHSA-2020:1335) telnet security update telnet-0.17-49.el6_10.x86_64.rpmLinux
(RHSA-2020:1335) telnet security update telnet-server-0.17-49.el6_10.i686.rpmLinux
(RHSA-2020:1335) telnet security update telnet-server-0.17-49.el6_10.x86_64.rpmLinux
(RHSA-2020:1349) krb5-appl security update krb5-appl-clients-1.0.1-10.el6_10.i686.rpmLinux
(RHSA-2020:1349) krb5-appl security update krb5-appl-clients-1.0.1-10.el6_10.x86_64.rpmLinux
(RHSA-2020:1349) krb5-appl security update krb5-appl-servers-1.0.1-10.el6_10.i686.rpmLinux
(RHSA-2020:1349) krb5-appl security update krb5-appl-servers-1.0.1-10.el6_10.x86_64.rpmLinux
(RHSA-2020:1318) telnet security update telnet-0.17-73.el8_1.1.x86_64.rpmLinux
(RHSA-2020:1318) telnet security update telnet-debugsource-0.17-73.el8_1.1.x86_64.rpmLinux
(RHSA-2020:1318) telnet security update telnet-server-0.17-73.el8_1.1.x86_64.rpmLinux
SUSE-SU-2020:1533-1(SUSE Linux Enterprise Server 12-SP5 ) krb5-appl-clients-1.0.3-3.3.1.x86_64.rpmLinux
SUSE-SU-2020:1533-1(SUSE Linux Enterprise Server 12-SP4 ) krb5-appl-clients-1.0.3-3.3.1.x86_64_SP4.rpmLinux
SUSE-SU-2020:1533-1(SUSE Linux Enterprise Server 12-SP5 ) krb5-appl-clients-debuginfo-1.0.3-3.3.1.x86_64.rpmLinux
SUSE-SU-2020:1533-1(SUSE Linux Enterprise Server 12-SP5 ) krb5-appl-debugsource-1.0.3-3.3.1.x86_64.rpmLinux
SUSE-SU-2020:1533-1(SUSE Linux Enterprise Server 12-SP4 ) krb5-appl-clients-debuginfo-1.0.3-3.3.1.x86_64_SP4.rpmLinux
SUSE-SU-2020:1533-1(SUSE Linux Enterprise Server 12-SP4 ) krb5-appl-debugsource-1.0.3-3.3.1.x86_64_SP4.rpmLinux
SUSE-SU-2020:1533-1(SUSE Linux Enterprise Server 12-SP5 ) krb5-appl-servers-1.0.3-3.3.1.x86_64.rpmLinux
SUSE-SU-2020:1533-1(SUSE Linux Enterprise Server 12-SP4 ) krb5-appl-servers-1.0.3-3.3.1.x86_64_SP4.rpmLinux
SUSE-SU-2020:1533-1(SUSE Linux Enterprise Server 12-SP4 ) krb5-appl-servers-debuginfo-1.0.3-3.3.1.x86_64.rpmLinux
SUSE-SU-2020:1533-1(SUSE Linux Enterprise Server 12-SP5 ) krb5-appl-servers-debuginfo-1.0.3-3.3.1.x86_64_SP5.rpmLinux
Krb5-appl-clients update (ELSA-2020-1349) krb5-appl-clients-1.0.1-10.el6_10.x86_64.rpmLinux
Krb5-appl-servers update (ELSA-2020-1349) krb5-appl-servers-1.0.1-10.el6_10.x86_64.rpmLinux
Krb5-appl-clients update (ELSA-2020-1349) krb5-appl-clients-1.0.1-10.el6_10.i686.rpmLinux
Krb5-appl-servers update (ELSA-2020-1349) krb5-appl-servers-1.0.1-10.el6_10.i686.rpmLinux
(CESA-2020:1318) telnet security update telnet-0.17-73.el8_1.1.x86_64.rpmLinux
(CESA-2020:1318) telnet security update telnet-server-0.17-73.el8_1.1.x86_64.rpmLinux
(CESA-2020:1335) telnet security update telnet-0.17-49.el6_10.i686.rpmLinux
(CESA-2020:1335) telnet security update telnet-0.17-49.el6_10.x86_64.rpmLinux
(CESA-2020:1335) telnet security update telnet-server-0.17-49.el6_10.i686.rpmLinux
(CESA-2020:1335) telnet security update telnet-server-0.17-49.el6_10.x86_64.rpmLinux
(CESA-2020:1349) krb5-appl security update krb5-appl-clients-1.0.1-10.el6_10.i686.rpmLinux
(CESA-2020:1349) krb5-appl security update krb5-appl-clients-1.0.1-10.el6_10.x86_64.rpmLinux
(CESA-2020:1349) krb5-appl security update krb5-appl-servers-1.0.1-10.el6_10.i686.rpmLinux
(CESA-2020:1349) krb5-appl security update krb5-appl-servers-1.0.1-10.el6_10.x86_64.rpmLinux
GNU network utilities (USN-5048-1) inetutils-telnetd_1.9.4-3ubuntu0.1_i386.debLinux
GNU network utilities (USN-5048-1) inetutils-telnetd_1.9.4-3ubuntu0.1_amd64.debLinux
GNU network utilities (USN-5048-1) inetutils-telnetd_1.9.4-11ubuntu0.1_i386.debLinux
GNU network utilities (USN-5048-1) inetutils-telnetd_1.9.4-11ubuntu0.1_amd64.debLinux
(RHSA-2020:1318)Important: security update telnet-debuginfo-0.17-73.el8_1.1.x86_64.rpmLinux
(RHSA-2020:1318)Important: security update telnet-server-debuginfo-0.17-73.el8_1.1.x86_64.rpmLinux
(RHSA-2020:1334)Important: security update telnet-debuginfo-0.17-65.el7_8.x86_64.rpmLinux
telnet Security Update (ALAS-2020-1422) telnet-0.17-65.amzn2.x86_64.rpmLinux
telnet Security Update (ALAS-2020-1422) telnet-server-0.17-65.amzn2.x86_64.rpmLinux
Telnet Vulnerability Affecting Cisco Products: June 2020 For Cisco IOS XE SoftwareNCM
Buffer Copy without Checking Size of Input (Classic Buffer Overflow) Vulnerability (CVE-2020-10188)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1706107Security Update for Cisco IOS XE Software 5.2(1)SV5(1.3a)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234