Advisories » MGASA-2020-0211

Updated netkit-telnet packages fix security vulnerability

Publication date: 15 May 2020
Modification date: 15 May 2020
Type: security
Affected Mageia releases : 7
CVE: CVE-2020-10188

Description

Updated netkit-telnetd packages fix security vulnerability:

A vulnerability was found where incorrect bounds checks in the telnet
server’s (telnetd) handling of short writes and urgent data, could lead
to information disclosure and corruption of heap data. An unauthenticated
remote attacker could exploit these bugs by sending specially crafted
telnet packets to achieve arbitrary code execution in the telnet server
(CVE-2020-10188).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=26296
• https://access.redhat.com/errata/RHSA-2020:1349
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10188

SRPMS

7/core

• netkit-telnet-0.17-18.1.mga7