ubuntu-cve-2019-0053
Vulnerability from osv_ubuntu
Published
2019-07-11 20:15
Modified
2025-10-24 04:47
Summary
Details

Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via the telnet client to remote telnet servers. This issue only affects the telnet client — accessible from the CLI or shell — in Junos OS. Inbound telnet services are not affected by this issue. This issue affects: Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D80; 14.1X53 versions prior to 14.1X53-D130, 14.1X53-D49; 15.1 versions prior to 15.1F6-S12, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D170; 15.1X53 versions prior to 15.1X53-D237, 15.1X53-D496, 15.1X53-D591, 15.1X53-D69; 16.1 versions prior to 16.1R3-S11, 16.1R7-S4; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R2-S7, 17.2R3-S1; 17.3 versions prior to 17.3R3-S4; 17.4 versions prior to 17.4R1-S6, 17.4R2-S3, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S3; 18.2 versions prior to 18.2R1-S5, 18.2R2-S2, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2.

Severity
7.8 (High)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
N/A (UNKNOWN)
medium
References
To clipboard 

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "inetutils-ftp",
            "binary_version": "2:1.9.2-1ubuntu0.1~esm2"
          },
          {
            "binary_name": "inetutils-ftpd",
            "binary_version": "2:1.9.2-1ubuntu0.1~esm2"
          },
          {
            "binary_name": "inetutils-inetd",
            "binary_version": "2:1.9.2-1ubuntu0.1~esm2"
          },
          {
            "binary_name": "inetutils-ping",
            "binary_version": "2:1.9.2-1ubuntu0.1~esm2"
          },
          {
            "binary_name": "inetutils-syslogd",
            "binary_version": "2:1.9.2-1ubuntu0.1~esm2"
          },
          {
            "binary_name": "inetutils-talk",
            "binary_version": "2:1.9.2-1ubuntu0.1~esm2"
          },
          {
            "binary_name": "inetutils-talkd",
            "binary_version": "2:1.9.2-1ubuntu0.1~esm2"
          },
          {
            "binary_name": "inetutils-telnet",
            "binary_version": "2:1.9.2-1ubuntu0.1~esm2"
          },
          {
            "binary_name": "inetutils-telnetd",
            "binary_version": "2:1.9.2-1ubuntu0.1~esm2"
          },
          {
            "binary_name": "inetutils-tools",
            "binary_version": "2:1.9.2-1ubuntu0.1~esm2"
          },
          {
            "binary_name": "inetutils-traceroute",
            "binary_version": "2:1.9.2-1ubuntu0.1~esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "inetutils",
        "purl": "pkg:deb/ubuntu/inetutils@2:1.9.2-1ubuntu0.1~esm2?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:1.9.2-1ubuntu0.1~esm2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:1.9.1.306-0a482-1",
        "2:1.9.1.363-bbc1-1",
        "2:1.9.2-1",
        "2:1.9.2-1ubuntu0.1~esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "inetutils-ftp",
            "binary_version": "2:1.9.4-1ubuntu0.1~esm3"
          },
          {
            "binary_name": "inetutils-ftpd",
            "binary_version": "2:1.9.4-1ubuntu0.1~esm3"
          },
          {
            "binary_name": "inetutils-inetd",
            "binary_version": "2:1.9.4-1ubuntu0.1~esm3"
          },
          {
            "binary_name": "inetutils-ping",
            "binary_version": "2:1.9.4-1ubuntu0.1~esm3"
          },
          {
            "binary_name": "inetutils-syslogd",
            "binary_version": "2:1.9.4-1ubuntu0.1~esm3"
          },
          {
            "binary_name": "inetutils-talk",
            "binary_version": "2:1.9.4-1ubuntu0.1~esm3"
          },
          {
            "binary_name": "inetutils-talkd",
            "binary_version": "2:1.9.4-1ubuntu0.1~esm3"
          },
          {
            "binary_name": "inetutils-telnet",
            "binary_version": "2:1.9.4-1ubuntu0.1~esm3"
          },
          {
            "binary_name": "inetutils-telnetd",
            "binary_version": "2:1.9.4-1ubuntu0.1~esm3"
          },
          {
            "binary_name": "inetutils-tools",
            "binary_version": "2:1.9.4-1ubuntu0.1~esm3"
          },
          {
            "binary_name": "inetutils-traceroute",
            "binary_version": "2:1.9.4-1ubuntu0.1~esm3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "inetutils",
        "purl": "pkg:deb/ubuntu/inetutils@2:1.9.4-1ubuntu0.1~esm3?arch=source\u0026distro=esm-apps/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:1.9.4-1ubuntu0.1~esm3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:1.9.4-1",
        "2:1.9.4-1build1",
        "2:1.9.4-1ubuntu0.1~esm1",
        "2:1.9.4-1ubuntu0.1~esm2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libsocks4",
            "binary_version": "4.3.beta2-19build1"
          },
          {
            "binary_name": "socks4-clients",
            "binary_version": "4.3.beta2-19build1"
          },
          {
            "binary_name": "socks4-server",
            "binary_version": "4.3.beta2-19build1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "socks4-server",
        "purl": "pkg:deb/ubuntu/socks4-server@4.3.beta2-19build1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.3.beta2-19",
        "4.3.beta2-19build1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "inetutils-ftp",
            "binary_version": "2:1.9.4-3ubuntu0.1+esm2"
          },
          {
            "binary_name": "inetutils-ftpd",
            "binary_version": "2:1.9.4-3ubuntu0.1+esm2"
          },
          {
            "binary_name": "inetutils-inetd",
            "binary_version": "2:1.9.4-3ubuntu0.1+esm2"
          },
          {
            "binary_name": "inetutils-ping",
            "binary_version": "2:1.9.4-3ubuntu0.1+esm2"
          },
          {
            "binary_name": "inetutils-syslogd",
            "binary_version": "2:1.9.4-3ubuntu0.1+esm2"
          },
          {
            "binary_name": "inetutils-talk",
            "binary_version": "2:1.9.4-3ubuntu0.1+esm2"
          },
          {
            "binary_name": "inetutils-talkd",
            "binary_version": "2:1.9.4-3ubuntu0.1+esm2"
          },
          {
            "binary_name": "inetutils-telnet",
            "binary_version": "2:1.9.4-3ubuntu0.1+esm2"
          },
          {
            "binary_name": "inetutils-telnetd",
            "binary_version": "2:1.9.4-3ubuntu0.1+esm2"
          },
          {
            "binary_name": "inetutils-tools",
            "binary_version": "2:1.9.4-3ubuntu0.1+esm2"
          },
          {
            "binary_name": "inetutils-traceroute",
            "binary_version": "2:1.9.4-3ubuntu0.1+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "inetutils",
        "purl": "pkg:deb/ubuntu/inetutils@2:1.9.4-3ubuntu0.1+esm2?arch=source\u0026distro=esm-apps/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:1.9.4-3ubuntu0.1+esm2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:1.9.4-2build1",
        "2:1.9.4-3",
        "2:1.9.4-3ubuntu0.1",
        "2:1.9.4-3ubuntu0.1+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libsocks4",
            "binary_version": "4.3.beta2-20"
          },
          {
            "binary_name": "socks4-clients",
            "binary_version": "4.3.beta2-20"
          },
          {
            "binary_name": "socks4-server",
            "binary_version": "4.3.beta2-20"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "socks4-server",
        "purl": "pkg:deb/ubuntu/socks4-server@4.3.beta2-20?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.3.beta2-20"
      ]
    }
  ],
  "aliases": [],
  "details": "Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via the telnet client to remote telnet servers. This issue only affects the telnet client \u2014 accessible from the CLI or shell \u2014 in Junos OS. Inbound telnet services are not affected by this issue. This issue affects: Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D80; 14.1X53 versions prior to 14.1X53-D130, 14.1X53-D49; 15.1 versions prior to 15.1F6-S12, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D170; 15.1X53 versions prior to 15.1X53-D237, 15.1X53-D496, 15.1X53-D591, 15.1X53-D69; 16.1 versions prior to 16.1R3-S11, 16.1R7-S4; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R2-S7, 17.2R3-S1; 17.3 versions prior to 17.3R3-S4; 17.4 versions prior to 17.4R1-S6, 17.4R2-S3, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S3; 18.2 versions prior to 18.2R1-S5, 18.2R2-S2, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2.",
  "id": "UBUNTU-CVE-2019-0053",
  "modified": "2025-10-24T04:47:21Z",
  "published": "2019-07-11T20:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-0053"
    },
    {
      "type": "REPORT",
      "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:12.telnet.asc"
    },
    {
      "type": "REPORT",
      "url": "https://raw.githubusercontent.com/hackerhouse-opensource/exploits/master/inetutils-telnet.txt"
    },
    {
      "type": "REPORT",
      "url": "https://www.openwall.com/lists/oss-security/2018/12/14/8"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0053"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-7781-1"
    }
  ],
  "related": [
    "USN-7781-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2019-0053"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.