Catalogo CVE

CVE-2022-39028

inetutils: CVE-2022-39028

[Catalogo CVE]

Gravità
Medium
Published
Source
[NVD] · [CVE record]
EPSS
2.11% · Oct 22, 2026

telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available through inetd. However, if the telnetd application has many crashes within a short time interval, the telnet service would become unavailable after inetd logs a "telnet/tcp server failing (looping), service terminated" error. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianinetutilssid2:2.8-4fixed
Debianinetutilsforky2:2.8-4fixed
Debianinetutilstrixie2:2.6-3+deb13u3fixed
Debianinetutilstrixie-security2:2.6-3+deb13u3fixed
Debianinetutilsbookworm2:2.4-2+deb12u3fixed
Debianinetutilsbookworm-security2:2.4-2+deb12u3fixed
Ubuntuinetutils20.042:1.9.4-10build1vulnerable
Ubuntuinetutils20.042:1.9.4-11vulnerable
Ubuntuinetutils20.042:1.9.4-11ubuntu0.1vulnerable
Ubuntuinetutils20.042:1.9.4-11ubuntu0.2fixed
Ubuntuinetutils22.042:2.0-1vulnerable
Ubuntuinetutils22.042:2.2-2vulnerable
Ubuntuinetutils22.042:2.2-2ubuntu0.1fixed
Susetelnetopenstack cloud 91.2-167.10.1fixed
Susetelnetopenstack cloud crowbar 91.2-167.10.1fixed
Susetelnetlinux enterprise server for sap applications 12 sp41.2-167.10.1fixed
Susetelnetlinux enterprise server 12 sp2-bcl1.2-167.10.1fixed
Susetelnetlinux enterprise server 12 sp3-bcl1.2-167.10.1fixed
Susetelnetlinux enterprise server 12 sp4-ltss1.2-167.10.1fixed
Susetelnetlinux enterprise server 12 sp51.2-167.10.1fixed
Susetelnetlinux enterprise server for sap applications 12 sp51.2-167.10.1fixed
Ubuntuinetutilspro2:1.9.4-2build1vulnerable
Ubuntuinetutilspro2:1.9.4-3vulnerable
Ubuntuinetutilspro2:1.9.4-3ubuntu0.1vulnerable
Ubuntuinetutilspro2:1.9.4-3ubuntu0.1+esm1vulnerable
Ubuntuinetutilspro2:1.9.4-3ubuntu0.1+esm2fixed
Ubuntuinetutils20.042:1.9.4-10build1vulnerable
Ubuntuinetutils20.042:1.9.4-11vulnerable
Ubuntuinetutils20.042:1.9.4-11ubuntu0.1vulnerable
Ubuntuinetutils20.042:1.9.4-11ubuntu0.2fixed
Ubuntuinetutils22.042:2.0-1vulnerable
Ubuntuinetutils22.042:2.2-2vulnerable
Ubuntuinetutils22.042:2.2-2ubuntu0.1fixed
Susekrb5-applopenstack cloud 91.0.3-3.9.1fixed
Susekrb5-applopenstack cloud crowbar 91.0.3-3.9.1fixed
Susekrb5-appllinux enterprise server for sap applications 12 sp41.0.3-3.9.1fixed
Susekrb5-appllinux enterprise server 12 sp2-bcl1.0.3-3.9.1fixed
Susekrb5-appllinux enterprise server 12 sp3-bcl1.0.3-3.9.1fixed
Susekrb5-appllinux enterprise server 12 sp4-ltss1.0.3-3.9.1fixed
Susekrb5-appllinux enterprise server 12 sp51.0.3-3.9.1fixed
Susekrb5-appllinux enterprise server for sap applications 12 sp51.0.3-3.9.1fixed
Susetelnetlinux enterprise module for basesystem 15 sp31.2-150000.3.6.1fixed
Susetelnetlinux enterprise module for basesystem 15 sp41.2-150000.3.6.1fixed
Susetelnetlinux enterprise module for legacy 15 sp31.2-150000.3.6.1fixed
Susetelnetlinux enterprise module for legacy 15 sp41.2-150000.3.6.1fixed
Susetelnetlinux enterprise high performance computing 15-espos1.2-150000.3.6.1fixed
Susetelnetlinux enterprise high performance computing 15-ltss1.2-150000.3.6.1fixed
Susetelnetlinux enterprise high performance computing 15 sp1-espos1.2-150000.3.6.1fixed
Susetelnetlinux enterprise high performance computing 15 sp1-ltss1.2-150000.3.6.1fixed
Susetelnetlinux enterprise high performance computing 15 sp2-espos1.2-150000.3.6.1fixed
Susetelnetlinux enterprise high performance computing 15 sp2-ltss1.2-150000.3.6.1fixed
Susetelnetlinux enterprise server 15-ltss1.2-150000.3.6.1fixed
Susetelnetlinux enterprise server 15 sp1-bcl1.2-150000.3.6.1fixed
Susetelnetlinux enterprise server 15 sp1-ltss1.2-150000.3.6.1fixed
Susetelnetlinux enterprise server 15 sp2-bcl1.2-150000.3.6.1fixed
Susetelnetlinux enterprise server 15 sp2-ltss1.2-150000.3.6.1fixed
Susetelnetlinux enterprise server for sap applications 151.2-150000.3.6.1fixed
Susetelnetlinux enterprise server for sap applications 15 sp11.2-150000.3.6.1fixed
Susetelnetlinux enterprise server for sap applications 15 sp21.2-150000.3.6.1fixed
Susetelnetmanager proxy 4.11.2-150000.3.6.1fixed
Susetelnetmanager retail branch server 4.11.2-150000.3.6.1fixed
Susetelnetmanager server 4.11.2-150000.3.6.1fixed
Susetelnetenterprise storage 61.2-150000.3.6.1fixed
Susetelnetenterprise storage 71.2-150000.3.6.1fixed
Opensusetelnetleap 15.31.2-150000.3.6.1fixed
Opensusetelnetleap 15.41.2-150000.3.6.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianinetutilssourcesid2:2.3-5not yet assignedNot reportedNot reported
Debianinetutilssourceforky2:2.3-5not yet assignedNot reportedNot reported
Debianinetutilssourcetrixie2:2.3-5not yet assignedNot reportedNot reported
Debianinetutilssourcebookworm2:2.3-5not yet assignedNot reportedNot reported
Ubuntuinetutilsdeb20.042:1.9.4-11ubuntu0.2Not reportedUSN-6304-1Not reported
Ubuntuinetutilsdeb22.042:2.2-2ubuntu0.1Not reportedUSN-6304-1Not reported
Susetelnetrpmopenstack cloud 91.2-167.10.1Not reportedSUSE-SU-2022:3735-1Not reported
Susetelnetrpmopenstack cloud crowbar 91.2-167.10.1Not reportedSUSE-SU-2022:3735-1Not reported
Susetelnetrpmlinux enterprise server for sap applications 12 sp41.2-167.10.1Not reportedSUSE-SU-2022:3735-1Not reported
Susetelnetrpmlinux enterprise server 12 sp2-bcl1.2-167.10.1Not reportedSUSE-SU-2022:3735-1Not reported
Susetelnetrpmlinux enterprise server 12 sp3-bcl1.2-167.10.1Not reportedSUSE-SU-2022:3735-1Not reported
Susetelnetrpmlinux enterprise server 12 sp4-ltss1.2-167.10.1Not reportedSUSE-SU-2022:3735-1Not reported
Susetelnetrpmlinux enterprise server 12 sp51.2-167.10.1Not reportedSUSE-SU-2022:3735-1Not reported
Susetelnetrpmlinux enterprise server for sap applications 12 sp51.2-167.10.1Not reportedSUSE-SU-2022:3735-1Not reported
Ubuntuinetutilsdebpro2:1.9.4-3ubuntu0.1+esm2Not reportedUBUNTU-CVE-2022-39028Not reported
Ubuntuinetutilsdeb20.042:1.9.4-11ubuntu0.2Not reportedUBUNTU-CVE-2022-39028Not reported
Ubuntuinetutilsdeb22.042:2.2-2ubuntu0.1Not reportedUBUNTU-CVE-2022-39028Not reported
Susekrb5-applrpmopenstack cloud 91.0.3-3.9.1Not reportedSUSE-SU-2022:3471-1Not reported
Susekrb5-applrpmopenstack cloud crowbar 91.0.3-3.9.1Not reportedSUSE-SU-2022:3471-1Not reported
Susekrb5-applrpmlinux enterprise server for sap applications 12 sp41.0.3-3.9.1Not reportedSUSE-SU-2022:3471-1Not reported
Susekrb5-applrpmlinux enterprise server 12 sp2-bcl1.0.3-3.9.1Not reportedSUSE-SU-2022:3471-1Not reported
Susekrb5-applrpmlinux enterprise server 12 sp3-bcl1.0.3-3.9.1Not reportedSUSE-SU-2022:3471-1Not reported
Susekrb5-applrpmlinux enterprise server 12 sp4-ltss1.0.3-3.9.1Not reportedSUSE-SU-2022:3471-1Not reported
Susekrb5-applrpmlinux enterprise server 12 sp51.0.3-3.9.1Not reportedSUSE-SU-2022:3471-1Not reported
Susekrb5-applrpmlinux enterprise server for sap applications 12 sp51.0.3-3.9.1Not reportedSUSE-SU-2022:3471-1Not reported
Susetelnetrpmlinux enterprise module for basesystem 15 sp31.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise module for basesystem 15 sp41.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise module for legacy 15 sp31.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise module for legacy 15 sp41.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise high performance computing 15-espos1.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise high performance computing 15-ltss1.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise high performance computing 15 sp1-espos1.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise high performance computing 15 sp1-ltss1.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise high performance computing 15 sp2-espos1.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise high performance computing 15 sp2-ltss1.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise server 15-ltss1.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise server 15 sp1-bcl1.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise server 15 sp1-ltss1.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise server 15 sp2-bcl1.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise server 15 sp2-ltss1.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise server for sap applications 151.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise server for sap applications 15 sp11.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmlinux enterprise server for sap applications 15 sp21.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmmanager proxy 4.11.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmmanager retail branch server 4.11.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmmanager server 4.11.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmenterprise storage 61.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Susetelnetrpmenterprise storage 71.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Opensusetelnetrpmleap 15.31.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported
Opensusetelnetrpmleap 15.41.2-150000.3.6.1Not reportedSUSE-SU-2022:3783-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [inetutils-ftp]Corretta

    Pacchetto sorgente: [inetutils]

    Dettagli (4)
    • 2:2.4-2+deb12u3 · amd64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · amd64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

  • [inetutils-ftpd]Corretta

    Pacchetto sorgente: [inetutils]

    Dettagli (4)
    • 2:2.4-2+deb12u3 · amd64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · amd64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

  • [inetutils-inetd]Corretta

    Pacchetto sorgente: [inetutils]

    Dettagli (4)
    • 2:2.4-2+deb12u3 · amd64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · amd64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

  • [inetutils-ping]Corretta

    Pacchetto sorgente: [inetutils]

    Dettagli (4)
    • 2:2.4-2+deb12u3 · amd64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · amd64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

  • Pacchetto sorgente: [inetutils]

    Dettagli (4)
    • 2:2.4-2+deb12u3 · amd64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · amd64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

  • [inetutils-talk]Corretta

    Pacchetto sorgente: [inetutils]

    Dettagli (4)
    • 2:2.4-2+deb12u3 · amd64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · amd64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

  • [inetutils-talkd]Corretta

    Pacchetto sorgente: [inetutils]

    Dettagli (4)
    • 2:2.4-2+deb12u3 · amd64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · amd64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

  • Pacchetto sorgente: [inetutils]

    Dettagli (4)
    • 2:2.4-2+deb12u3 · amd64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · amd64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

  • Pacchetto sorgente: [inetutils]

    Dettagli (4)
    • 2:2.4-2+deb12u3 · amd64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · amd64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

  • [inetutils-tools]Corretta

    Pacchetto sorgente: [inetutils]

    Dettagli (4)
    • 2:2.4-2+deb12u3 · amd64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · amd64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

  • Pacchetto sorgente: [inetutils]

    Dettagli (4)
    • 2:2.4-2+deb12u3 · amd64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · amd64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 2:2.4-2+deb12u3 · arm64 · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

  • [telnet]Corretta

    Pacchetto sorgente: [inetutils]

    Dettagli (4)
    • 0.17+2.4-2+deb12u3 · all · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 0.17+2.4-2+deb12u3 · all · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 0.17+2.4-2+deb12u3 · all · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 0.17+2.4-2+deb12u3 · all · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

  • [telnetd]Corretta

    Pacchetto sorgente: [inetutils]

    Dettagli (4)
    • 0.17+2.4-2+deb12u3 · all · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 0.17+2.4-2+deb12u3 · all · bookworm

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 0.17+2.4-2+deb12u3 · all · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

    • 0.17+2.4-2+deb12u3 · all · bookworm-security

      Corretta · Corretta: 2:2.3-5

      dsa · inetutils · debian · bookworm

Osservato:

Riferimenti