MGASA-2020-0211 - Updated netkit-telnet packages fix security vulnerability

Publication date: 15 May 2020
URL: https://advisories.mageia.org/MGASA-2020-0211.html
Type: security
Affected Mageia releases: 7
CVE: CVE-2020-10188

Updated netkit-telnetd packages fix security vulnerability:

A vulnerability was found where incorrect bounds checks in the telnet
server’s (telnetd) handling of short writes and urgent data, could lead
to information disclosure and corruption of heap data. An unauthenticated
remote attacker could exploit these bugs by sending specially crafted
telnet packets to achieve arbitrary code execution in the telnet server
(CVE-2020-10188).

References:
- https://bugs.mageia.org/show_bug.cgi?id=26296
- https://access.redhat.com/errata/RHSA-2020:1349
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10188

SRPMS:
- 7/core/netkit-telnet-0.17-18.1.mga7