https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 14:54:35 +0000 https://vulnerability.circl.lu/vuln/cve-2026-28372 <p><strong>Affected:</strong> GNU inetutils</p> <p>telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALS_DIRECTORY environment variable, and requires an unprivileged local user to create a login.noauth file.</p> <p><strong>Affected:</strong> GNU inetutils</p> <p>telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALS_DIRECTORY environment variable, and requires an unprivileged local user to create a login.noauth file.</p> https://vulnerability.circl.lu/vuln/cve-2026-28372 https://vulnerability.circl.lu/vuln/usn-8387-1 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: inetutils, Ubuntu:Pro:16.04:LTS: inetutils, Ubuntu:Pro:18.04:LTS: inetutils, Ubuntu:Pro:20.04:LTS: inetutils, Ubuntu:Pro:22.04:LTS: inetutils, Ubuntu:24.04:LTS: inetutils, Ubuntu:25.10: inetutils, Ubuntu:26.04:LTS: inetutils</p> <p>It was discovered that the Inetutils telnet daemon incorrectly handled the CREDENTIALS_DIRECTORY environment variable. An attacker could possibly use this issue to escalate privileges. (CVE-2026-28372)</p> <p>It was discovered that the Inetutils telnet daemon did not properly validate buffer bounds when processing LINEMODE SLC suboptions. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-32746)</p> <p>It was discovered that the Inetutils telnet client incorrectly handled the NEW_ENVIRON SEND USERVAR option. An attacker could possibly use this issue to read arbitrary environment variables. (CVE-2026-32772)</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: inetutils, Ubuntu:Pro:16.04:LTS: inetutils, Ubuntu:Pro:18.04:LTS: inetutils, Ubuntu:Pro:20.04:LTS: inetutils, Ubuntu:Pro:22.04:LTS: inetutils, Ubuntu:24.04:LTS: inetutils, Ubuntu:25.10: inetutils, Ubuntu:26.04:LTS: inetutils</p> <p>It was discovered that the Inetutils telnet daemon incorrectly handled the CREDENTIALS_DIRECTORY environment variable. An attacker could possibly use this issue to escalate privileges. (CVE-2026-28372)</p> <p>It was discovered that the Inetutils telnet daemon did not properly validate buffer bounds when processing LINEMODE SLC suboptions. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-32746)</p> <p>It was discovered that the Inetutils telnet client incorrectly handled the NEW_ENVIRON SEND USERVAR option. An attacker could possibly use this issue to read arbitrary environment variables. (CVE-2026-32772)</p> https://vulnerability.circl.lu/vuln/usn-8387-1