CVE-2022-39028
Fixed in a distro release EPSS 2%
telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available through inetd. However, if the telnetd application has many crashes within a short time interval, the telnet service would become unavailable after inetd logs a "telnet/tcp server failing (looping), service terminated" error. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.
Products: gnu inetutils, mit kerberos_5, debian_linux, netkit_telnet_project netkit_telnet
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | inetutils | 2:1.9.4-7+deb10u2 |
| Debian 12 | inetutils | 2:2.3-5 |
| Debian 13 | inetutils | 2:2.3-5 |
| Debian 14 | inetutils | 2:2.3-5 |
| SUSE Enterprise Storage 6 | telnet | 1.2-150000.3.6.1 |
| SUSE Enterprise Storage 7 | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP3 | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP4 | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | krb5-appl | 1.0.3-3.9.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | telnet | 1.2-167.10.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | krb5-appl | 1.0.3-3.9.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | telnet | 1.2-167.10.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | krb5-appl | 1.0.3-3.9.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | telnet | 1.2-167.10.1 |
| SUSE Linux Enterprise Server 12 SP5 | krb5-appl | 1.0.3-3.9.1 |
| SUSE Linux Enterprise Server 12 SP5 | telnet | 1.2-167.10.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise Server 15-LTSS | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | krb5-appl | 1.0.3-3.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | telnet | 1.2-167.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | krb5-appl | 1.0.3-3.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | telnet | 1.2-167.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | telnet | 1.2-150000.3.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | telnet | 1.2-150000.3.6.1 |
| SUSE Manager Proxy 4.1 | telnet | 1.2-150000.3.6.1 |
| SUSE Manager Retail Branch Server 4.1 | telnet | 1.2-150000.3.6.1 |
| SUSE Manager Server 4.1 | telnet | 1.2-150000.3.6.1 |
| SUSE OpenStack Cloud 9 | krb5-appl | 1.0.3-3.9.1 |
| SUSE OpenStack Cloud 9 | telnet | 1.2-167.10.1 |
| SUSE OpenStack Cloud Crowbar 9 | krb5-appl | 1.0.3-3.9.1 |
| SUSE OpenStack Cloud Crowbar 9 | telnet | 1.2-167.10.1 |
| Ubuntu 20.04 LTS | inetutils | 2:1.9.4-11ubuntu0.2 |
| Ubuntu 22.04 LTS | inetutils | 2:2.2-2ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | inetutils | 2:1.9.2-1ubuntu0.1~esm2 |
| Ubuntu Pro 16.04 LTS | inetutils | 2:1.9.4-1ubuntu0.1~esm3 |
| Ubuntu Pro 18.04 LTS | inetutils | 2:1.9.4-3ubuntu0.1+esm2 |
| openSUSE Leap 15.3 | telnet | 1.2-150000.3.6.1 |
| openSUSE Leap 15.4 | telnet | 1.2-150000.3.6.1 |