Ubuntu Security Notice 6304-1 - It was discovered that telnetd in GNU Inetutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS It was discovered that Inetutils incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information, or execute arbitrary code.
5e5b21b9ac02972f5007f231ffaf635f51f013051951a1c224ca6c41a86c49a8
=========================================================================
Ubuntu Security Notice USN-6304-1
August 22, 2023
inetutils vulnerabilities
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Summary:
Inetutils could be made to crash or execute arbitrary code.
Software Description:
- inetutils: File Transfer Protocol client
Details:
It was discovered that telnetd in GNU Inetutils incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash. This issue
only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS (CVE-2022-39028)
It was discovered that Inetutils incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information,
or execute arbitrary code.
(CVE-2023-40303)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.04:
inetutils-telnetd 2:2.4-2ubuntu1.1
inetutils-tools 2:2.4-2ubuntu1.1
Ubuntu 22.04 LTS:
inetutils-telnetd 2:2.2-2ubuntu0.1
inetutils-tools 2:2.2-2ubuntu0.1
Ubuntu 20.04 LTS:
inetutils-telnetd 2:1.9.4-11ubuntu0.2
inetutils-tools 2:1.9.4-11ubuntu0.2
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6304-1
CVE-2022-39028, CVE-2023-40303
Package Information:
https://launchpad.net/ubuntu/+source/inetutils/2:2.4-2ubuntu1.1
https://launchpad.net/ubuntu/+source/inetutils/2:2.2-2ubuntu0.1
https://launchpad.net/ubuntu/+source/inetutils/2:1.9.4-11ubuntu0.2