telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.
CVSS Details
- CVSS 3.1 Base Score: 3.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade inetutils | Apr 6, 2026 | Apr 6, 2026 |
| Ubuntu | — | Upgrade inetutils-ftpdUpgrade inetutils-talkUpgrade inetutils-inetd (Ubuntu Pro)Upgrade inetutils-talkd (Ubuntu Pro)Upgrade inetutils-inetdUpgrade telnetUpgrade inetutils-ftp (Ubuntu Pro)Upgrade inetutils-talk (Ubuntu Pro)Upgrade inetutils-telnetd (Ubuntu Pro)Upgrade inetutils-pingUpgrade inetutils-syslogd (Ubuntu Pro)Upgrade inetutils-tools (Ubuntu Pro)Upgrade inetutils-telnetUpgrade inetutils-traceroute (Ubuntu Pro)Upgrade inetutils-syslogdUpgrade inetutils-talkdUpgrade telnetdUpgrade inetutils-tracerouteUpgrade inetutils-telnet (Ubuntu Pro)Upgrade inetutils-ftpd (Ubuntu Pro)Upgrade inetutils-toolsUpgrade inetutils-telnetdUpgrade inetutils-ftpUpgrade inetutils-ping (Ubuntu Pro) | Jun 9, 2026 | Jun 4, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub