The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-serverUpgrade krb5-appl-clientsUpgrade krb5-appl-serversUpgrade krb5-develUpgrade krb5-libs | Dec 1, 2016 | Dec 24, 2011 |
| Debian | — | Upgrade krb5Upgrade inetutilsUpgrade heimdal | Jul 30, 2024 | Dec 25, 2011 |
| Freebsd | — | Upgrade krb5-applUpgrade FreeBSD | Dec 10, 2025 | Dec 26, 2011 |
| Gentoo Linux | — | Upgrade app-crypt/heimdal.Upgrade app-crypt/mit-krb5-appl. | Oct 30, 2017 | Dec 24, 2011 |
| Oracle Solaris | — | Upgrade network/telnet to version 0.5.11-0.175.0.4.0.4.1 on Solaris 11.0 | May 29, 2017 | Dec 24, 2011 |
| Oracle_linux | — | Upgrade krb5-server-ldapUpgrade krb5-libsUpgrade krb5-workstationUpgrade krb5-appl-serversUpgrade krb5-serverUpgrade krb5-appl-clientsUpgrade krb5-devel | Oct 16, 2024 | Dec 25, 2011 |
| Suse | — | Upgrade krb5-develUpgrade krb5-x86Upgrade krb5-plugin-kdb-ldapUpgrade krb5-appl-serversUpgrade krb5-apps-clientsUpgrade krb5-devel-32bitUpgrade krb5-appl-clientsUpgrade krb5-serverUpgrade krb5-apps-serversUpgrade krb5-clientUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-32bitUpgrade krb5 | Feb 17, 2015 | Jun 28, 2013 |
| Vmsa 2012 0006 | — | Upgrade VMware ESX 4.0 to build number 660575 | Aug 17, 2012 | Dec 24, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub