9.8
Critical
CVE-2026-32746 telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters)…
Description
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Inetutils 2.7 | earliest → 2.7 | No fix stated |
References
- www.openwall.com www.openwall.com
- lists.gnu.org lists.gnu.org
Timeline
- Published
- Last modified
Other CVEs of Inetutils
The 4 CVEs of Inetutils →
CVE-2026-32772
telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via…
3.4
Low
CVE-2026-28372
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service…
7.4
High
CVE-2026-24061
GNU InetUtils Argument Injection Vulnerability
9.8
Critical