Mageia 2020-0211: netkit-telnet security update
Summary
Updated netkit-telnetd packages fix security vulnerability:
A vulnerability was found where incorrect bounds checks in the telnet
server’s (telnetd) handling of short writes and urgent data, could lead
to information disclosure and corruption of heap data. An unauthenticated
remote attacker could exploit these bugs by sending specially crafted
telnet packets to achieve arbitrary code execution in the telnet server
(CVE-2020-10188).
References
- https://bugs.mageia.org/show_bug.cgi?id=26296
- https://access.redhat.com/errata/RHSA-2020:1349
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10188
Resolution
MGASA-2020-0211 - Updated netkit-telnet packages fix security vulnerability
SRPMS
- 7/core/netkit-telnet-0.17-18.1.mga7