CVE-2020-10188 log

Source
Severity High
Remote Yes
Type Arbitrary code execution
Description
A vulnerability was found in inetutils before version 1.9.4.91 where incorrect bounds checks in the telnet server’s (telnetd) handling of short writes and urgent data could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packets to achieve arbitrary code execution in the telnet server.
Group Package Affected Fixed Severity Status Ticket
AVG-1003 inetutils 1.9.4-9 2.0-1 High Fixed FS#70040
Date Advisory Group Package Severity Type
09 Jun 2021 ASA-202106-20 AVG-1003 inetutils High arbitrary code execution
References
https://bugzilla.redhat.com/show_bug.cgi?id=1811673
https://git.savannah.gnu.org/gitweb/?p=inetutils.git;a=commitdiff;h=cd7e7e685daeafb68f19347747af6340731a4518