PT-2022-12401 · Gnu · Gnu Inetutils

Published 2022-01-14 · Updated 2022-01-15 · CVE-2021-45779

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions GNU Inetutils version 2.2.16-cf091

Description A NULL pointer dereference in the unsetcmd() function at inetutils/telnet/commands.c can lead to a segmentation fault or application crash.

Recommendations For GNU Inetutils version 2.2.16-cf091, consider applying a patch to fix the NULL pointer dereference issue in the unsetcmd() function as a permanent solution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-45779

Affected Products

Gnu Inetutils

References · 6

• https://osv.dev/vulnerability/UBUNTU-CVE-2021-45779 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-45779 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-45779 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-45779 · Security Note
• https://lists.gnu.org/archive/html/bug-inetutils/2021-12/msg00007.html · Note
• https://t.me/cibsecurity/35603 · Telegram Post