PatchTheCVEtelnet vulnerabilities and fixes
Recent CVEs affecting telnet, with upgrade or downgrade steps. 2 tracked.
telnet has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-05-02. Highest priority: CVE-2005-0468 (score 56/100).
- CVE-2005-0469 HIGH 7.5 MITIGATE Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE subo
- CVE-2005-0468 HIGH 7.5 DOWNGRADE Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows
FAQ
How do I fix telnet vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is telnet being exploited right now?
None of the tracked telnet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which telnet CVE should I patch first?
CVE-2005-0468 currently ranks highest (56/100): Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows.