USN-6304-1: Inetutils vulnerabilities
It was discovered that telnetd in GNU Inetutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS (CVE-2022-39028) It was discovered that Inetutils incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information, or execute arbitrary code. (CVE-2023-40303)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6304-1?
The severity of USN-6304-1 is moderate.
What is the affected software of USN-6304-1?
The affected software of USN-6304-1 is inetutils-telnetd and inetutils-tools.
How does the vulnerability CVE-2022-39028 impact USN-6304-1?
The vulnerability CVE-2022-39028 can cause a crash in telnetd in GNU Inetutils.
How can I fix the vulnerability in inetutils-telnetd?
To fix the vulnerability in inetutils-telnetd, update it to version 2:2.4-2ubuntu1.1.
How can I fix the vulnerability in inetutils-tools?
To fix the vulnerability in inetutils-tools, update it to version 2:2.4-2ubuntu1.1.