GNU InetUtils Argument Injection Vulnerability

Description

References

• codeberg.org/inetutils/inetutils/commit/ccba9f748aa8d50a38d7748e2e60362edd6a32cc · Patch
• codeberg.org/inetutils/inetutils/commit/fd702c02497b2f398e739e3119bed0b23dd7aa7b · Patch
• lists.gnu.org/archive/html/bug-inetutils/2026-01/msg00004.html · Mitigation
• redteam.ae/blog/cve-2026-24061-inetutils-telnetd-root-bypass · Exploit
• gnu.org/software/inetutils · Product
• openwall.com/lists/oss-security/2026/01/20/2 · Mailing List
• openwall.com/lists/oss-security/2026/01/20/8 · Mailing List
• vicarius.io/vsociety/posts/cve-2026-24061-detection-script-remote-authentication-bypass-in-gnu-inetutils-package · Third Party Advisory
• vicarius.io/vsociety/posts/cve-2026-24061-mitigation-script-remote-authentication-bypass-in-gnu-inetutils-package

inetutils의 다른 취약점

• CVE-2026-32772보통 4.7telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.
• CVE-2026-32746심각 9.8telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_…
• CVE-2026-28372높음 7.8telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added …
• CVE-2023-40303높음 7.8GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin…
• CVE-2022-39028높음 7.5telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff…