- Vulnerability/
- USN-6304-1
USN-6304-1: Inetutils vulnerabilities
First published: Tue Aug 22 2023(Updated: )
It was discovered that telnetd in GNU Inetutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS (CVE-2022-39028) It was discovered that Inetutils incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information, or execute arbitrary code. (CVE-2023-40303)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/inetutils-telnetd | <2:2.4-2ubuntu1.1 | 2:2.4-2ubuntu1.1 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/inetutils-tools | <2:2.4-2ubuntu1.1 | 2:2.4-2ubuntu1.1 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/inetutils-telnetd | <2:2.2-2ubuntu0.1 | 2:2.2-2ubuntu0.1 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/inetutils-tools | <2:2.2-2ubuntu0.1 | 2:2.2-2ubuntu0.1 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/inetutils-telnetd | <2:1.9.4-11ubuntu0.2 | 2:1.9.4-11ubuntu0.2 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/inetutils-tools | <2:1.9.4-11ubuntu0.2 | 2:1.9.4-11ubuntu0.2 |
| Ubuntu Ubuntu | =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2022-39028
- https://ubuntu.com/security/CVE-2023-40303
- https://launchpad.net/ubuntu/+source/inetutils/2:2.4-2ubuntu1.1
- https://launchpad.net/ubuntu/+source/inetutils/2:2.2-2ubuntu0.1
- https://launchpad.net/ubuntu/+source/inetutils/2:1.9.4-11ubuntu0.2
- https://ubuntu.com/security/notices/USN-6304-1 (Advisory)
Frequently Asked Questions
What is the severity of USN-6304-1?
The severity of USN-6304-1 is moderate.
What is the affected software of USN-6304-1?
The affected software of USN-6304-1 is inetutils-telnetd and inetutils-tools.
How does the vulnerability CVE-2022-39028 impact USN-6304-1?
The vulnerability CVE-2022-39028 can cause a crash in telnetd in GNU Inetutils.
How can I fix the vulnerability in inetutils-telnetd?
To fix the vulnerability in inetutils-telnetd, update it to version 2:2.4-2ubuntu1.1.
How can I fix the vulnerability in inetutils-tools?
To fix the vulnerability in inetutils-tools, update it to version 2:2.4-2ubuntu1.1.
- collector/usn
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/23.04
- version/ubuntu ubuntu/22.04
- version/ubuntu ubuntu/20.04