CVE-2026-32746

Опубликовано: 13 мар. 2026

Источник: nvd

CVSS3: 9.8

EPSS Средний

Описание

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.

Ссылки

https://lists.gnu.org/archive/html/bug-inetutils/2026-03/msg00031.html
Exploit
Vendor Advisory
https://www.openwall.com/lists/oss-security/2026/03/12/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2026/03/14/1
Mailing List
Third Party Advisory
https://github.com/watchtowrlabs/watchtowr-vs-telnetd-CVE-2026-32746
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:inetutils:*:*:*:*:*:*:*:*

Версия до 2.7 (включая)

EPSS

Процентиль: 98%

0.23674

Средний

9.8 Critical

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVE-2026-32746

CVSS3: 9.8

ubuntu

5 месяцев назад

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.

CVE-2026-32746

CVSS3: 9.8

debian

5 месяцев назад

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in ...

openSUSE-SU-2026:20374-1

suse-cvrf

5 месяцев назад

Security update for krb5-appl

SUSE-SU-2026:0930-1

suse-cvrf

5 месяцев назад

Security update for krb5-appl

GHSA-qvfm-56cp-4988

CVSS3: 9.8

github

5 месяцев назад

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.

EPSS

Процентиль: 98%

0.23674

Средний

9.8 Critical

CVSS3

Дефекты

CWE-120