p PatchFirst

CVE-2011-4862

CVE-2011-4862

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.

EPSS 95.1% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • heimdal Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.5.dfsg.1-1

    Update to 1.5.dfsg.1-1

  • heimdal Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.5.dfsg.1-1

    Update to 1.5.dfsg.1-1

  • heimdal Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.5.dfsg.1-1

    Update to 1.5.dfsg.1-1

  • inetutils Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:1.8-6

    Update to 2:1.8-6

  • inetutils Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:1.8-6

    Update to 2:1.8-6

  • inetutils Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:1.8-6

    Update to 2:1.8-6

  • krb5 Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.8+dfsg~aa+r23527-1

    Update to 1.8+dfsg~aa+r23527-1

  • krb5 Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.8+dfsg~aa+r23527-1

    Update to 1.8+dfsg~aa+r23527-1

  • krb5 Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.8+dfsg~aa+r23527-1

    Update to 1.8+dfsg~aa+r23527-1

Original sources

Check your server →