The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary user control the activities of the process.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade inetutils | Oct 10, 2023 | Aug 14, 2023 |
| Ubuntu | — | Upgrade inetutils-ftp (Ubuntu Pro)Upgrade inetutils-ping (Ubuntu Pro)Upgrade inetutils-tools (Ubuntu Pro)Upgrade inetutils-syslogd (Ubuntu Pro)Upgrade inetutils-ftpd (Ubuntu Pro)Upgrade inetutils-toolsUpgrade inetutils-telnet (Ubuntu Pro)Upgrade inetutils-telnetdUpgrade inetutils-traceroute (Ubuntu Pro)Upgrade inetutils-talk (Ubuntu Pro)Upgrade inetutils-inetd (Ubuntu Pro) | Aug 23, 2023 | Aug 14, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub