CVE-2021-40491

Mô tả

Tham khảo

• bugs.debian.org/cgi-bin/bugreport.cgi · Third Party Advisory
• git.savannah.gnu.org/cgit/inetutils.git/commit · Patch
• lists.debian.org/debian-lts-announce/2022/11/msg00033.html · Mailing List
• lists.gnu.org/archive/html/bug-inetutils/2021-06/msg00002.html · Mailing List

Lỗ hổng khác của inetutils

• CVE-2026-32772TRUNG BÌNH 4.7telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.
• CVE-2026-32746NGHIÊM TRỌNG 9.8telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_…
• CVE-2026-28372CAO 7.8telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added …
• CVE-2026-24061NGHIÊM TRỌNG 9.8ĐANG BỊ KHAI THÁC (CISA KEV)telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
• CVE-2023-40303CAO 7.8GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin…