[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0fFRopEBHaQiLcDp1prOBynREGPq_Ogmw256wber9Hs":3,"g5a-risk:CVE-2022-39028":145},{"success":4,"data":5,"meta":142},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":51,"references":52,"referencesCount":51,"weaknesses":74,"weaknessesCount":83,"isActivelyExploited":84,"cisaInfo":26,"otxData":26,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":140,"notableEvents":141},"CVE-2022-39028","What is CVE-2022-39028?","telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available through inetd. However, if the telnetd application has many crashes within a short time interval, the telnet service would become unavailable after inetd logs a \"telnet\u002Ftcp server failing (looping), service terminated\" error. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.","telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typic...","2022-08-30T05:15:08.117","2023-09-27T20:10:25.007",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,0.02111,[29,29,29,29,29,29,29],"High",[33,38,42,47],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"gnu","inetutils","*","cpe:2.3:a:gnu:inetutils:*:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":36,"criteria":41,"vulnerable":4},"mit","kerberos_5","cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":36,"criteria":50,"vulnerable":4},"netkit-telnet_project","netkit-telnet","cpe:2.3:a:netkit-telnet_project:netkit-telnet:*:*:*:*:*:*:*:*",4,[53,60,65,69],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fgit.hadrons.org\u002Fcgit\u002Fdebian\u002Fpkgs\u002Finetutils.git\u002Fcommit\u002F?id=113da8021710d871c7dd72d2a4d5615d42d64289","Hadrons",[57,58,59],"Mailing List","Patch","Vendor Advisory",{"url":61,"source":62,"tags":63},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2022\u002F11\u002Fmsg00033.html","Debian",[57,64],"Third Party Advisory",{"url":66,"source":67,"tags":68},"https:\u002F\u002Flists.gnu.org\u002Farchive\u002Fhtml\u002Fbug-inetutils\u002F2022-08\u002Fmsg00002.html","Gnu",[57,59],{"url":70,"source":71,"tags":72},"https:\u002F\u002Fpierrekim.github.io\u002Fblog\u002F2022-08-24-2-byte-dos-freebsd-netbsd-telnetd-netkit-telnetd-inetutils-telnetd-kerberos-telnetd.html","Github",[73,58,64],"Exploit",[75],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-476","NULL Pointer Dereference","The product dereferences a pointer that it expects to be valid but is NULL.","","Stable","Base","Simple",1,false,[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2022-39028? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-39028, a high severity cyber security vulnerability from 2022. telnetd in GNU Inetutils through 2.3, MIT krb5-appl through...","CVE-2022-39028, CVE-2022-39028 vulnerability, CVE-2022-39028 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, gnu security, mit security, debian security, netkit-telnet_project security, inetutils vulnerability, kerberos_5 vulnerability, debian_linux vulnerability, netkit-telnet vulnerability","\u002Fwhat-is\u002Fcve-2022-39028",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-39028","Cybersecurity","CVE-2022-39028, CVE-2022-39028 vulnerability, CVE-2022-39028 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112,120,127,133],{"Operator":26,"Negate":26,"Nodes":113},[114],{"Operator":115,"Negate":26,"CPEMatch":116},"OR",[117],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":119},"71A27EE2-625D-4C9F-8490-FAB69D43CC47","2.3",{"Operator":26,"Negate":26,"Nodes":121},[122],{"Operator":115,"Negate":26,"CPEMatch":123},[124],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":125,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":126},"C22F67DF-8D11-48CD-978B-D4E887215849","1.0.3",{"Operator":26,"Negate":26,"Nodes":128},[129],{"Operator":115,"Negate":26,"CPEMatch":130},[131],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Operator":26,"Negate":26,"Nodes":134},[135],{"Operator":115,"Negate":26,"CPEMatch":136},[137],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":139},"C0EF3431-0075-4A40-BAC6-28C9F08315A2","0.17",[],[],{"lastModified":11,"cacheTime":143,"version":144},1792358879184,"2.0",{"score":146,"band":147,"action":148,"scoredAt":149},49,"Medium","Plan remediation","2026-10-16T06:55:33.702175+00:00"]