CVE-2020-10188
Fixed in a distro release EPSS 74%
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
Products: netkit_telnet_project netkit_telnet, fedoraproject fedora, debian_linux, arista eos, oracle communications_performance_intelligence_center, juniper junos
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | telnet | 1:0.17-65.amzn2 |
| Amazon Linux 2 | telnet-server | 1:0.17-65.amzn2 |
| Arch Linux | inetutils | 2.0-1 |
| Debian 12 | inetutils | 2:1.9.4-12 |
| Debian 12 | netkit-telnet-ssl | 0.17.17+0.1-2woody3 |
| Debian 13 | inetutils | 2:1.9.4-12 |
| Debian 13 | netkit-telnet-ssl | 0.17.17+0.1-2woody3 |
| Debian 14 | inetutils | 2:1.9.4-12 |
| Debian 14 | netkit-telnet-ssl | 0.17.17+0.1-2woody3 |
| Debian 8 | inetutils | 2:1.9.2.39.3a460-3+deb8u1 |
| Debian 9 | inetutils | 2:1.9.4-2+deb9u1 |
| Red Hat Enterprise Linux 6 | krb5-appl | 0:1.0.1-10.el6_10 |
| Red Hat Enterprise Linux 6 | krb5-appl-servers | 0:1.0.1-10.el6_10 |
| Red Hat Enterprise Linux 6 | telnet | 1:0.17-49.el6_10 |
| Red Hat Enterprise Linux 6 | telnet-server | 1:0.17-49.el6_10 |
| Red Hat Enterprise Linux 7 | telnet | 1:0.17-65.el7_8 |
| Red Hat Enterprise Linux 7 | telnet-server | 1:0.17-65.el7_8 |
| Red Hat Enterprise Linux 8 | telnet | 1:0.17-73.el8_1.1 |
| Red Hat Enterprise Linux 8 | telnet-server | 1:0.17-73.el8_1.1 |
| Red Hat rhel aus 7.6 | telnet | 1:0.17-65.el7_6 |
| Red Hat rhel aus 7.6 | telnet-debuginfo | 1:0.17-65.el7_6 |
| Red Hat rhel aus 7.6 | telnet-server | 1:0.17-65.el7_6 |
| Red Hat rhel aus 7.7 | telnet | 1:0.17-65.el7_7 |
| Red Hat rhel aus 7.7 | telnet-debuginfo | 1:0.17-65.el7_7 |
| Red Hat rhel aus 7.7 | telnet-server | 1:0.17-65.el7_7 |
| Red Hat rhel e4s 7.6 | telnet | 1:0.17-65.el7_6 |
| Red Hat rhel e4s 7.6 | telnet-debuginfo | 1:0.17-65.el7_6 |
| Red Hat rhel e4s 7.6 | telnet-server | 1:0.17-65.el7_6 |
| Red Hat rhel e4s 7.7 | telnet | 1:0.17-65.el7_7 |
| Red Hat rhel e4s 7.7 | telnet-debuginfo | 1:0.17-65.el7_7 |
| Red Hat rhel e4s 7.7 | telnet-server | 1:0.17-65.el7_7 |
| Red Hat rhel e4s 8.0 | telnet | 1:0.17-73.el8_0.1 |
| Red Hat rhel e4s 8.0 | telnet-server | 1:0.17-73.el8_0.1 |
| Red Hat rhel tus 7.6 | telnet | 1:0.17-65.el7_6 |
| Red Hat rhel tus 7.6 | telnet-debuginfo | 1:0.17-65.el7_6 |
| Red Hat rhel tus 7.6 | telnet-server | 1:0.17-65.el7_6 |
| Red Hat rhel tus 7.7 | telnet | 1:0.17-65.el7_7 |
| Red Hat rhel tus 7.7 | telnet-debuginfo | 1:0.17-65.el7_7 |
| Red Hat rhel tus 7.7 | telnet-server | 1:0.17-65.el7_7 |
| SUSE Enterprise Storage 5 | krb5-appl | 1.0.3-3.3.1 |
| SUSE HPE Helion OpenStack 8 | krb5-appl | 1.0.3-3.3.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | krb5-appl | 1.0.3-3.3.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | krb5-appl | 1.0.3-3.3.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | krb5-appl | 1.0.3-3.3.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | krb5-appl | 1.0.3-3.3.1 |
| SUSE Linux Enterprise Server 12 SP4 | krb5-appl | 1.0.3-3.3.1 |
| SUSE Linux Enterprise Server 12 SP5 | krb5-appl | 1.0.3-3.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | krb5-appl | 1.0.3-3.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | krb5-appl | 1.0.3-3.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | krb5-appl | 1.0.3-3.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | krb5-appl | 1.0.3-3.3.1 |
| SUSE OpenStack Cloud 7 | krb5-appl | 1.0.3-3.3.1 |
| SUSE OpenStack Cloud 8 | krb5-appl | 1.0.3-3.3.1 |
| SUSE OpenStack Cloud Crowbar 8 | krb5-appl | 1.0.3-3.3.1 |
| Ubuntu 16.04 LTS | netkit-telnet-ssl | no fix |
| Ubuntu 18.04 LTS | inetutils | 2:1.9.4-3ubuntu0.1 |
| Ubuntu 18.04 LTS | netkit-telnet-ssl | no fix |
| Ubuntu 20.04 LTS | inetutils | 2:1.9.4-11ubuntu0.1 |
| Ubuntu 20.04 LTS | netkit-telnet-ssl | no fix |
| Ubuntu 22.04 LTS | netkit-telnet-ssl | no fix |
| Ubuntu 24.04 LTS | netkit-telnet-ssl | no fix |
| Ubuntu 25.10 | netkit-telnet-ssl | no fix |
| Ubuntu 26.04 LTS | netkit-telnet-ssl | no fix |
| Ubuntu 26.10 | netkit-telnet-ssl | no fix |
| Ubuntu Pro 14.04 LTS | inetutils | 2:1.9.2-1ubuntu0.1~esm2 |
| Ubuntu Pro 16.04 LTS | inetutils | 2:1.9.4-1ubuntu0.1~esm1 |
| Ubuntu Pro 16.04 LTS | inetutils | 2:1.9.4-1ubuntu0.1~esm3 |
| Ubuntu Pro 18.04 LTS | inetutils | 2:1.9.4-3ubuntu0.1+esm2 |