CVEvulnerability

CVE-2020-10188

9.8 CRITICAL Published 2020-03-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-03-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-120

Description

utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.

Affected configurations

• netkit telnet project netkit telnet (<= 0.17) • fedoraproject fedora 30 • fedoraproject fedora 31 • fedoraproject fedora 32 • debian debian linux 8.0 • debian debian linux 9.0 • arista eos (<= 4.20.15) • arista eos (>= 4.21.0 <= 4.21.10m) • arista eos (>= 4.22 <= 4.22.4m) • arista eos (>= 4.23 <= 4.23.3m) • arista eos 4.24.0f • oracle communications performance intelligence center 10.4.0.2 • juniper junos 12.3 • juniper junos 12.3r12 • juniper junos 12.3x48 • juniper junos 12.3x50 • juniper junos 15.1 • juniper junos 15.1x49 • juniper junos 15.1x49-d30 • juniper junos 15.1x49-d60 • juniper junos 15.1x49-d140 • juniper junos 15.1x49-d150 • juniper junos 15.1x49-d160 • juniper junos 16.1 • juniper junos 17.2 • juniper junos 17.2x75 • juniper junos 17.3 • juniper junos 17.4 • juniper junos 18.1 • juniper junos 18.2 • juniper junos 18.2x75 • juniper junos 18.2x75-d10 • juniper junos 18.2x75-d30 • juniper junos 18.3 • juniper junos 18.4 • juniper junos 19.1 • juniper junos 19.2 • juniper junos 19.3 • juniper junos 19.4 • juniper junos 20.1

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References