7.5

CVE-2022-39028: debian debian_linux NULL Pointer Dereference

CVSS: 7.5v3.1HighModified
AliasesMGASA-2022-0394MGASA-2022-0460SUSE-SU-2022:3471-1
Published 30-08-2022Last modified 03-08-2024
Open JSON

Vulnerability summary

CVE-2022-39028 is a high (CVSS 7.5) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 2.11% chance of exploitation in the next 30 days, higher than 81.5% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
40/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (NVD)
EPSS score
2.11%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 3 · Related 2
DLA-3205-1USN-6304-1USN-7781-1

Timeline

  1. 30-08-2022
    PublishedVulnerability first disclosed.
  2. 03-08-2024
    Last modifiedVulnerability information updated.

Description

telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available through inetd. However, if the telnetd application has many crashes within a short time interval, the telnet service would become unavailable after inetd logs a "telnet/tcp server failing (looping), service terminated" error. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

2.11%

Chance of exploitation in the next 30 days

Percentile

82%

Versus all other CVEs

30-day change

0.00 pp

From 2.11% on 19-09-2026

19-09-202619-10-2026
EPSS score
2.11%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (pierrekim.github.io)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Suse39 products
  • krb5-appl&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 1.0.3-3.9.1
  • krb5-appl&distro=SUSE Linux Enterprise Server 12 SP3-BCL< 1.0.3-3.9.1
  • krb5-appl&distro=SUSE Linux Enterprise Server 12 SP4-LTSS< 1.0.3-3.9.1
  • krb5-appl&distro=SUSE Linux Enterprise Server 12 SP5< 1.0.3-3.9.1
  • krb5-appl&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4< 1.0.3-3.9.1
Debian2 products
Mageia2 products
  • krb5-appl< 1.0.3-13.2.mga8
  • netkit-telnet< 0.17-20.1.mga8
Opensuse2 products
  • telnet&distro=openSUSE Leap 15.3< 1.2-150000.3.6.1
  • telnet&distro=openSUSE Leap 15.4< 1.2-150000.3.6.1
Gnu1 product
Mit1 product
Netkit-telnet_project1 product
Ubuntu1 product
  • inetutils< 2:1.9.2-1ubuntu0.1~esm2 | < 2:1.9.4-1ubuntu0.1~esm3 | < 2:1.9.4-3ubuntu0.1+esm2 | < 2:1.9.4-11ubuntu0.2 | < 2:2.2-2ubuntu0.1

8 vendors · 49 products

References

19 links
Show all 19 references