CVE-2026-32746

Medium

Published: —Translated: 09/06/2026(UTC)NVD NIST

Summary

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.

Risk Assessment

This vulnerability may lead to unauthorized access or system crashes, posing a threat to the integrity and availability of services.

Recommendation

It is recommended to update GNU inetutils to the latest version to mitigate this vulnerability and to monitor systems for unauthorized access.

Original NVD description (English source)

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.