10

CVE-2020-10188: arista eos Classic Buffer Overflow

CVSS: 10.0v2.0HighModified
AliasesMGASA-2020-0169MGASA-2020-0211SUSE-SU-2020:1533-1
Published 06-03-2020Last modified 21-01-2026
Open JSON

Vulnerability summary

CVE-2020-10188 is a high (CVSS 10.0) Classic Buffer Overflow vulnerability in arista eos. EPSS estimates a 74.34% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
10.0/10
010
High · v2.0 (NVD)
EPSS score
74.34%
0%100%
Critical · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
USN-7781-1

Timeline

  1. 06-03-2020
    PublishedVulnerability first disclosed.
  2. 21-01-2026
    Last modifiedVulnerability information updated.

Description

utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

74.34%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 74.34% on 18-09-2026

18-09-202618-10-2026
EPSS score
74.34%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse15 products
  • krb5-appl&distro=HPE Helion OpenStack 8< 1.0.3-3.3.1
  • krb5-appl&distro=SUSE Enterprise Storage 5< 1.0.3-3.3.1
  • krb5-appl&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 1.0.3-3.3.1
  • krb5-appl&distro=SUSE Linux Enterprise Server 12 SP2-LTSS< 1.0.3-3.3.1
  • krb5-appl&distro=SUSE Linux Enterprise Server 12 SP3-BCL< 1.0.3-3.3.1
Redhat5 products
  • krb5-appl< 0:1.0.1-10.el6_10
  • krb5-appl-servers< 0:1.0.1-10.el6_10
  • telnet< 1:0.17-73.el8_1.1 | < 1:0.17-65.el7_8 | < 1:0.17-49.el6_10 | < 1:0.17-73.el8_0.1 | < 1:0.17-65.el7_6 | < 1:0.17-65.el7_7
  • telnet-debuginfo< 1:0.17-65.el7_6 | < 1:0.17-65.el7_7
  • telnet-server< 1:0.17-73.el8_1.1 | < 1:0.17-65.el7_8 | < 1:0.17-49.el6_10 | < 1:0.17-73.el8_0.1 | < 1:0.17-65.el7_6 | < 1:0.17-65.el7_7
Debian3 products
  • inetutils< 2:1.9.4-12 | < 2:1.9.2.39.3a460-3+deb8u1 | < 2:1.9.4-2+deb9u1
  • netkit-telnet-ssl< 0.17.17+0.1-2woody3
  • debian_linuxEOL8.0 | 9.0
Mageia2 products
  • krb5-appl< 1.0.3-10.1.mga7
  • netkit-telnet< 0.17-18.1.mga7
Ubuntu2 products
  • inetutils< 2:1.9.2-1ubuntu0.1~esm2 | < 2:1.9.4-1ubuntu0.1~esm1 | < 2:1.9.4-3ubuntu0.1 | < 2:1.9.4-11ubuntu0.1
  • netkit-telnet-sslAll versions (No fix recorded)
Arista1 product
  • eos≤ 4.20.15 | ≥ 4.21.0, ≤ 4.21.10m | ≥ 4.22, ≤ 4.22.4m | ≥ 4.23, ≤ 4.23.3m | 4.24.0f
Fedoraproject1 product
Juniper1 product
  • junos12.3 | 12.3:r1 | 12.3:r10 | 12.3:r10-s1 | 12.3:r10-s2 | 12.3:r11 | 12.3:r12 | 12.3:r12-s1 | 12.3:r12-s10 | 12.3:r12-s11 | 12.3:r12-s12 | 12.3:r12-s13 | 12.3:r12-s14 | 12.3:r12-s15 | 12.3:r12-s3 | 12.3:r12-s4 | 12.3:r12-s6 | 12.3:r12-s8 | 12.3:r13 | 12.3:r2 | 12.3:r3 | 12.3:r4 | 12.3:r5 | 12.3:r6 | 12.3:r7 | 12.3:r8 | 12.3:r9 | 12.3r12 | 12.3x48 | 12.3x48:d10 | 12.3x48:d100 | 12.3x48:d15 | 12.3x48:d20 | 12.3x48:d25 | 12.3x48:d30 | 12.3x48:d35 | 12.3x48:d40 | 12.3x48:d45 | 12.3x48:d50 | 12.3x48:d51 | 12.3x48:d55 | 12.3x48:d60 | 12.3x48:d65 | 12.3x48:d66 | 12.3x48:d70 | 12.3x48:d75 | 12.3x48:d80 | 12.3x48:d85 | 12.3x48:d90 | 12.3x48:d95 | 12.3x50 | 12.3x50:d20 | 12.3x50:d30 | 12.3x50:d35 | 12.3x50:d40 | 12.3x50:d45 | 15.1 | 15.1:a1 | 15.1:f | 15.1:f1 | 15.1:f2 | 15.1:f2-s1 | 15.1:f2-s2 | 15.1:f2-s3 | 15.1:f2-s4 | 15.1:f3 | 15.1:f4 | 15.1:f5 | 15.1:f5-s7 | 15.1:f6 | 15.1:f6-s1 | 15.1:f6-s10 | 15.1:f6-s12 | 15.1:f6-s2 | 15.1:f6-s3 | 15.1:f6-s4 | 15.1:f6-s5 | 15.1:f6-s6 | 15.1:f6-s7 | 15.1:f6-s8 | 15.1:f6-s9 | 15.1:f7 | 15.1:r | 15.1:r1 | 15.1:r2 | 15.1:r3 | 15.1:r4 | 15.1:r4-s7 | 15.1:r4-s8 | 15.1:r4-s9 | 15.1:r5 | 15.1:r5-s1 | 15.1:r5-s3 | 15.1:r5-s5 | 15.1:r5-s6 | 15.1:r6 | 15.1:r6-s1 | 15.1:r6-s2 | 15.1:r6-s3 | 15.1:r6-s4 | 15.1:r6-s6 | 15.1:r7 | 15.1:r7-s1 | 15.1:r7-s2 | 15.1:r7-s3 | 15.1:r7-s4 | 15.1:r7-s5 | 15.1:r7-s6 | 15.1x49 | 15.1x49:d10 | 15.1x49:d100 | 15.1x49:d110 | 15.1x49:d120 | 15.1x49:d130 | 15.1x49:d131 | 15.1x49:d140 | 15.1x49:d15 | 15.1x49:d150 | 15.1x49:d160 | 15.1x49:d170 | 15.1x49:d180 | 15.1x49:d190 | 15.1x49:d20 | 15.1x49:d200 | 15.1x49:d210 | 15.1x49:d25 | 15.1x49:d30 | 15.1x49:d35 | 15.1x49:d40 | 15.1x49:d45 | 15.1x49:d50 | 15.1x49:d55 | 15.1x49:d60 | 15.1x49:d65 | 15.1x49:d70 | 15.1x49:d75 | 15.1x49:d80 | 15.1x49:d90 | 15.1x49-d30 | 15.1x49-d60 | 15.1x49-d140 | 15.1x49-d150 | 15.1x49-d160 | 16.1 | 16.1:r | 16.1:r1 | 16.1:r2 | 16.1:r3 | 16.1:r3-s10 | 16.1:r3-s11 | 16.1:r3-s8 | 16.1:r4 | 16.1:r4-s12 | 16.1:r4-s2 | 16.1:r4-s3 | 16.1:r4-s4 | 16.1:r4-s6 | 16.1:r4-s8 | 16.1:r4-s9 | 16.1:r5 | 16.1:r5-s4 | 16.1:r6 | 16.1:r6-s1 | 16.1:r6-s3 | 16.1:r6-s4 | 16.1:r6-s6 | 16.1:r7 | 16.1:r7-s2 | 16.1:r7-s3 | 16.1:r7-s4 | 16.1:r7-s5 | 16.1:r7-s6 | 16.1:r7-s7 | 17.2 | 17.2:r1 | 17.2:r1-s1 | 17.2:r1-s2 | 17.2:r1-s3 | 17.2:r1-s4 | 17.2:r1-s5 | 17.2:r1-s6 | 17.2:r1-s7 | 17.2:r1-s8 | 17.2:r2 | 17.2:r2-s11 | 17.2:r2-s4 | 17.2:r2-s6 | 17.2:r2-s7 | 17.2:r3 | 17.2:r3-s1 | 17.2:r3-s2 | 17.2:r3-s3 | 17.2x75 | 17.3 | 17.3:r1 | 17.3:r1-s1 | 17.3:r1-s4 | 17.3:r2 | 17.3:r2-s1 | 17.3:r2-s2 | 17.3:r2-s3 | 17.3:r2-s4 | 17.3:r2-s5 | 17.3:r3 | 17.3:r3-s1 | 17.3:r3-s2 | 17.3:r3-s3 | 17.3:r3-s4 | 17.3:r3-s5 | 17.3:r3-s6 | 17.3:r3-s7 | 17.3:r3-s8 | 17.4 | 17.4:r1 | 17.4:r1-s1 | 17.4:r1-s2 | 17.4:r1-s3 | 17.4:r1-s4 | 17.4:r1-s5 | 17.4:r1-s6 | 17.4:r1-s7 | 17.4:r2 | 17.4:r2-s1 | 17.4:r2-s10 | 17.4:r2-s2 | 17.4:r2-s3 | 17.4:r2-s4 | 17.4:r2-s5 | 17.4:r2-s6 | 17.4:r2-s7 | 17.4:r2-s8 | 17.4:r2-s9 | 17.4:r3 | 17.4:r3-s1 | 18.1 | 18.1:r1 | 18.1:r2 | 18.1:r2-s1 | 18.1:r2-s2 | 18.1:r2-s4 | 18.1:r3 | 18.1:r3-s1 | 18.1:r3-s2 | 18.1:r3-s3 | 18.1:r3-s4 | 18.1:r3-s5 | 18.1:r3-s6 | 18.1:r3-s7 | 18.1:r3-s8 | 18.1:r3-s9 | 18.2 | 18.2:r | 18.2:r1 | 18.2:r1-s2 | 18.2:r1-s3 | 18.2:r1-s4 | 18.2:r1-s5 | 18.2:r2 | 18.2:r2-s1 | 18.2:r2-s2 | 18.2:r2-s3 | 18.2:r2-s4 | 18.2:r2-s5 | 18.2:r2-s6 | 18.2:r2-s7 | 18.2:r2-s8 | 18.2:r3 | 18.2:r3-s1 | 18.2:r3-s2 | 18.2:r3-s3 | 18.2:r3-s4 | 18.2x75 | 18.2x75:d12 | 18.2x75:d20 | 18.2x75:d30 | 18.2x75:d40 | 18.2x75:d411 | 18.2x75:d50 | 18.2x75:d51 | 18.2x75:d60 | 18.2x75-d10 | 18.2x75-d30 | 18.3 | 18.3:r1 | 18.3:r1-s1 | 18.3:r1-s2 | 18.3:r1-s3 | 18.3:r1-s4 | 18.3:r1-s5 | 18.3:r1-s6 | 18.3:r2 | 18.3:r2-s1 | 18.3:r2-s2 | 18.3:r2-s3 | 18.3:r3 | 18.3:r3-s1 | 18.3:r3-s2 | 18.4 | 18.4:r1 | 18.4:r1-s1 | 18.4:r1-s2 | 18.4:r1-s3 | 18.4:r1-s4 | 18.4:r1-s5 | 18.4:r1-s6 | 18.4:r1-s7 | 18.4:r2 | 18.4:r2-s1 | 18.4:r2-s2 | 18.4:r2-s3 | 18.4:r2-s4 | 18.4:r3 | 18.4:r3-s1 | 18.4:r3-s2 | 18.4:r3-s3 | 19.1 | 19.1:r1 | 19.1:r1-s1 | 19.1:r1-s2 | 19.1:r1-s3 | 19.1:r1-s4 | 19.1:r1-s5 | 19.1:r1-s6 | 19.1:r2 | 19.1:r2-s1 | 19.1:r3 | 19.1:r3-s1 | 19.2 | 19.2:r1 | 19.2:r1-s1 | 19.2:r1-s2 | 19.2:r1-s3 | 19.2:r1-s4 | 19.3 | 19.3:r1 | 19.3:r1-s1 | 19.3:r2 | 19.3:r2-s1 | 19.3:r2-s2 | 19.4 | 19.4:r1 | 19.4:r1-s1 | 19.4:r1-s2 | 19.4:r2 | 20.1 | 20.1:r1 | 20.1:r1-s1
Netkit_telnet_project1 product
Oracle1 product

10 vendors · 32 products

References

42 links
Show all 42 references