telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade inetutils | Apr 6, 2026 | Apr 6, 2026 |
| Ubuntu | — | Upgrade inetutils-telnetdUpgrade inetutils-tracerouteUpgrade telnetUpgrade telnetdUpgrade inetutils-ftp (Ubuntu Pro)Upgrade inetutils-traceroute (Ubuntu Pro)Upgrade inetutils-tools (Ubuntu Pro)Upgrade inetutils-syslogd (Ubuntu Pro)Upgrade inetutils-ping (Ubuntu Pro)Upgrade inetutils-talkdUpgrade inetutils-pingUpgrade inetutils-telnet (Ubuntu Pro)Upgrade inetutils-toolsUpgrade inetutils-talkd (Ubuntu Pro)Upgrade inetutils-ftpdUpgrade inetutils-ftpUpgrade inetutils-ftpd (Ubuntu Pro)Upgrade inetutils-telnetUpgrade inetutils-talkUpgrade inetutils-telnetd (Ubuntu Pro)Upgrade inetutils-inetd (Ubuntu Pro)Upgrade inetutils-inetdUpgrade inetutils-talk (Ubuntu Pro)Upgrade inetutils-syslogd | Jun 9, 2026 | Jun 4, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub