{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for telnet is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Telnet is a popular protocol for logging in to remote systems over the Internet. The telnet-server packages include a telnet service that supports remote logins into the host machine. The telnet service is disabled by default.\n\nSecurity Fix(es):\n\n* telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code (CVE-2020-10188)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:1318",
        "url": "https://access.redhat.com/errata/RHSA-2020:1318"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1811673",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1318.json"
      }
    ],
    "title": "Red Hat Security Advisory: telnet security update",
    "tracking": {
      "current_release_date": "2026-01-21T02:42:07+00:00",
      "generator": {
        "date": "2026-01-21T02:42:07+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.15"
        }
      },
      "id": "RHSA-2020:1318",
      "initial_release_date": "2020-04-06T08:26:50+00:00",
      "revision_history": [
        {
          "date": "2020-04-06T08:26:50+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-04-06T08:26:50+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-21T02:42:07+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.1.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-73.el8_1.1.ppc64le",
                "product": {
                  "name": "telnet-1:0.17-73.el8_1.1.ppc64le",
                  "product_id": "telnet-1:0.17-73.el8_1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-73.el8_1.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-73.el8_1.1.ppc64le",
                "product": {
                  "name": "telnet-server-1:0.17-73.el8_1.1.ppc64le",
                  "product_id": "telnet-server-1:0.17-73.el8_1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-73.el8_1.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debugsource-1:0.17-73.el8_1.1.ppc64le",
                "product": {
                  "name": "telnet-debugsource-1:0.17-73.el8_1.1.ppc64le",
                  "product_id": "telnet-debugsource-1:0.17-73.el8_1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debugsource@0.17-73.el8_1.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-73.el8_1.1.ppc64le",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-73.el8_1.1.ppc64le",
                  "product_id": "telnet-debuginfo-1:0.17-73.el8_1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-73.el8_1.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-debuginfo-1:0.17-73.el8_1.1.ppc64le",
                "product": {
                  "name": "telnet-server-debuginfo-1:0.17-73.el8_1.1.ppc64le",
                  "product_id": "telnet-server-debuginfo-1:0.17-73.el8_1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server-debuginfo@0.17-73.el8_1.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-73.el8_1.1.s390x",
                "product": {
                  "name": "telnet-1:0.17-73.el8_1.1.s390x",
                  "product_id": "telnet-1:0.17-73.el8_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-73.el8_1.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-73.el8_1.1.s390x",
                "product": {
                  "name": "telnet-server-1:0.17-73.el8_1.1.s390x",
                  "product_id": "telnet-server-1:0.17-73.el8_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-73.el8_1.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debugsource-1:0.17-73.el8_1.1.s390x",
                "product": {
                  "name": "telnet-debugsource-1:0.17-73.el8_1.1.s390x",
                  "product_id": "telnet-debugsource-1:0.17-73.el8_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debugsource@0.17-73.el8_1.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-73.el8_1.1.s390x",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-73.el8_1.1.s390x",
                  "product_id": "telnet-debuginfo-1:0.17-73.el8_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-73.el8_1.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-debuginfo-1:0.17-73.el8_1.1.s390x",
                "product": {
                  "name": "telnet-server-debuginfo-1:0.17-73.el8_1.1.s390x",
                  "product_id": "telnet-server-debuginfo-1:0.17-73.el8_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server-debuginfo@0.17-73.el8_1.1?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-73.el8_1.1.x86_64",
                "product": {
                  "name": "telnet-1:0.17-73.el8_1.1.x86_64",
                  "product_id": "telnet-1:0.17-73.el8_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-73.el8_1.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-73.el8_1.1.x86_64",
                "product": {
                  "name": "telnet-server-1:0.17-73.el8_1.1.x86_64",
                  "product_id": "telnet-server-1:0.17-73.el8_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-73.el8_1.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debugsource-1:0.17-73.el8_1.1.x86_64",
                "product": {
                  "name": "telnet-debugsource-1:0.17-73.el8_1.1.x86_64",
                  "product_id": "telnet-debugsource-1:0.17-73.el8_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debugsource@0.17-73.el8_1.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-73.el8_1.1.x86_64",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-73.el8_1.1.x86_64",
                  "product_id": "telnet-debuginfo-1:0.17-73.el8_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-73.el8_1.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-debuginfo-1:0.17-73.el8_1.1.x86_64",
                "product": {
                  "name": "telnet-server-debuginfo-1:0.17-73.el8_1.1.x86_64",
                  "product_id": "telnet-server-debuginfo-1:0.17-73.el8_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server-debuginfo@0.17-73.el8_1.1?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-73.el8_1.1.aarch64",
                "product": {
                  "name": "telnet-1:0.17-73.el8_1.1.aarch64",
                  "product_id": "telnet-1:0.17-73.el8_1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-73.el8_1.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-73.el8_1.1.aarch64",
                "product": {
                  "name": "telnet-server-1:0.17-73.el8_1.1.aarch64",
                  "product_id": "telnet-server-1:0.17-73.el8_1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-73.el8_1.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debugsource-1:0.17-73.el8_1.1.aarch64",
                "product": {
                  "name": "telnet-debugsource-1:0.17-73.el8_1.1.aarch64",
                  "product_id": "telnet-debugsource-1:0.17-73.el8_1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debugsource@0.17-73.el8_1.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-73.el8_1.1.aarch64",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-73.el8_1.1.aarch64",
                  "product_id": "telnet-debuginfo-1:0.17-73.el8_1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-73.el8_1.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-debuginfo-1:0.17-73.el8_1.1.aarch64",
                "product": {
                  "name": "telnet-server-debuginfo-1:0.17-73.el8_1.1.aarch64",
                  "product_id": "telnet-server-debuginfo-1:0.17-73.el8_1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server-debuginfo@0.17-73.el8_1.1?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-73.el8_1.1.src",
                "product": {
                  "name": "telnet-1:0.17-73.el8_1.1.src",
                  "product_id": "telnet-1:0.17-73.el8_1.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-73.el8_1.1?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-73.el8_1.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.aarch64"
        },
        "product_reference": "telnet-1:0.17-73.el8_1.1.aarch64",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-73.el8_1.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.ppc64le"
        },
        "product_reference": "telnet-1:0.17-73.el8_1.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-73.el8_1.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.s390x"
        },
        "product_reference": "telnet-1:0.17-73.el8_1.1.s390x",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-73.el8_1.1.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.src"
        },
        "product_reference": "telnet-1:0.17-73.el8_1.1.src",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-73.el8_1.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.x86_64"
        },
        "product_reference": "telnet-1:0.17-73.el8_1.1.x86_64",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-73.el8_1.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.aarch64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-73.el8_1.1.aarch64",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-73.el8_1.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.ppc64le"
        },
        "product_reference": "telnet-debuginfo-1:0.17-73.el8_1.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-73.el8_1.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.s390x"
        },
        "product_reference": "telnet-debuginfo-1:0.17-73.el8_1.1.s390x",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-73.el8_1.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-73.el8_1.1.x86_64",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debugsource-1:0.17-73.el8_1.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.aarch64"
        },
        "product_reference": "telnet-debugsource-1:0.17-73.el8_1.1.aarch64",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debugsource-1:0.17-73.el8_1.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.ppc64le"
        },
        "product_reference": "telnet-debugsource-1:0.17-73.el8_1.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debugsource-1:0.17-73.el8_1.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.s390x"
        },
        "product_reference": "telnet-debugsource-1:0.17-73.el8_1.1.s390x",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debugsource-1:0.17-73.el8_1.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.x86_64"
        },
        "product_reference": "telnet-debugsource-1:0.17-73.el8_1.1.x86_64",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-73.el8_1.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.aarch64"
        },
        "product_reference": "telnet-server-1:0.17-73.el8_1.1.aarch64",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-73.el8_1.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.ppc64le"
        },
        "product_reference": "telnet-server-1:0.17-73.el8_1.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-73.el8_1.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.s390x"
        },
        "product_reference": "telnet-server-1:0.17-73.el8_1.1.s390x",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-73.el8_1.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-73.el8_1.1.x86_64",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-debuginfo-1:0.17-73.el8_1.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.aarch64"
        },
        "product_reference": "telnet-server-debuginfo-1:0.17-73.el8_1.1.aarch64",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-debuginfo-1:0.17-73.el8_1.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.ppc64le"
        },
        "product_reference": "telnet-server-debuginfo-1:0.17-73.el8_1.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-debuginfo-1:0.17-73.el8_1.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.s390x"
        },
        "product_reference": "telnet-server-debuginfo-1:0.17-73.el8_1.1.s390x",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-debuginfo-1:0.17-73.el8_1.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.x86_64"
        },
        "product_reference": "telnet-server-debuginfo-1:0.17-73.el8_1.1.x86_64",
        "relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-10188",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2020-03-06T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.x86_64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.x86_64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.x86_64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1811673"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found where incorrect bounds checks in the telnet server\u2019s (telnetd) handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packets to achieve arbitrary code execution in the telnet server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability exists in the `telnet-server` package, not in the `telnet` client-side package. For a Red Hat Enterprise Linux host to be vulnerable, it must have telnet-server installed and the telnetd service enabled.  Use of telnetd is not recommended, as it is an un-encrypted protocol with cleartext transmission of passwords; alternatives such as openssh are preferred.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.src",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.aarch64",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.ppc64le",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.s390x",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.x86_64"
        ],
        "known_not_affected": [
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.aarch64",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.ppc64le",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.s390x",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.x86_64",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.aarch64",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.ppc64le",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.s390x",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.x86_64",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.aarch64",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.ppc64le",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.s390x",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.x86_64",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.aarch64",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.ppc64le",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.s390x",
          "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "RHBZ#1811673",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10188",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188"
        }
      ],
      "release_date": "2020-02-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-06T08:26:50+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.src",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1318"
        },
        {
          "category": "workaround",
          "details": "When in enforcing mode, SELinux as configured in Red Hat Enterprise Linux provides some mitigation against an exploit for telnet-server, because it limits the kind of operations it can perform and programs that can be run from the telnet-server\u0027s context.",
          "product_ids": [
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.src",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.x86_64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.x86_64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.x86_64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.x86_64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.src",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-1:0.17-73.el8_1.1.x86_64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debuginfo-1:0.17-73.el8_1.1.x86_64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-debugsource-1:0.17-73.el8_1.1.x86_64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-1:0.17-73.el8_1.1.x86_64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.aarch64",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.ppc64le",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.s390x",
            "AppStream-8.1.0.Z.MAIN.EUS:telnet-server-debuginfo-1:0.17-73.el8_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for telnet is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Telnet is a popular protocol for logging in to remote systems over the Internet. The telnet-server packages include a telnet service that supports remote logins into the host machine. The telnet service is disabled by default.\n\nSecurity Fix(es):\n\n* telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code (CVE-2020-10188)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:1334",
        "url": "https://access.redhat.com/errata/RHSA-2020:1334"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1811673",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1334.json"
      }
    ],
    "title": "Red Hat Security Advisory: telnet security update",
    "tracking": {
      "current_release_date": "2026-01-21T02:42:03+00:00",
      "generator": {
        "date": "2026-01-21T02:42:03+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.15"
        }
      },
      "id": "RHSA-2020:1334",
      "initial_release_date": "2020-04-06T16:41:53+00:00",
      "revision_history": [
        {
          "date": "2020-04-06T16:41:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-04-06T16:41:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-21T02:42:03+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Client (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Client (v. 7)",
                  "product_id": "7Client-7.8.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
                  "product_id": "7ComputeNode-7.8.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-7.8.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-7.8.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-65.el7_8.x86_64",
                "product": {
                  "name": "telnet-1:0.17-65.el7_8.x86_64",
                  "product_id": "telnet-1:0.17-65.el7_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-65.el7_8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-65.el7_8.x86_64",
                "product": {
                  "name": "telnet-server-1:0.17-65.el7_8.x86_64",
                  "product_id": "telnet-server-1:0.17-65.el7_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-65.el7_8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-65.el7_8.x86_64",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-65.el7_8.x86_64",
                  "product_id": "telnet-debuginfo-1:0.17-65.el7_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-65.el7_8?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-65.el7_8.src",
                "product": {
                  "name": "telnet-1:0.17-65.el7_8.src",
                  "product_id": "telnet-1:0.17-65.el7_8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-65.el7_8?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-65.el7_8.s390x",
                "product": {
                  "name": "telnet-1:0.17-65.el7_8.s390x",
                  "product_id": "telnet-1:0.17-65.el7_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-65.el7_8?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-65.el7_8.s390x",
                "product": {
                  "name": "telnet-server-1:0.17-65.el7_8.s390x",
                  "product_id": "telnet-server-1:0.17-65.el7_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-65.el7_8?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-65.el7_8.s390x",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-65.el7_8.s390x",
                  "product_id": "telnet-debuginfo-1:0.17-65.el7_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-65.el7_8?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-65.el7_8.ppc64",
                "product": {
                  "name": "telnet-1:0.17-65.el7_8.ppc64",
                  "product_id": "telnet-1:0.17-65.el7_8.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-65.el7_8?arch=ppc64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-65.el7_8.ppc64",
                "product": {
                  "name": "telnet-server-1:0.17-65.el7_8.ppc64",
                  "product_id": "telnet-server-1:0.17-65.el7_8.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-65.el7_8?arch=ppc64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-65.el7_8.ppc64",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-65.el7_8.ppc64",
                  "product_id": "telnet-debuginfo-1:0.17-65.el7_8.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-65.el7_8?arch=ppc64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-65.el7_8.ppc64le",
                "product": {
                  "name": "telnet-1:0.17-65.el7_8.ppc64le",
                  "product_id": "telnet-1:0.17-65.el7_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-65.el7_8?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-65.el7_8.ppc64le",
                "product": {
                  "name": "telnet-server-1:0.17-65.el7_8.ppc64le",
                  "product_id": "telnet-server-1:0.17-65.el7_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-65.el7_8?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
                  "product_id": "telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-65.el7_8?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.8.Z:telnet-1:0.17-65.el7_8.ppc64"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.ppc64",
        "relates_to_product_reference": "7Client-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.ppc64le",
        "relates_to_product_reference": "7Client-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.8.Z:telnet-1:0.17-65.el7_8.s390x"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.s390x",
        "relates_to_product_reference": "7Client-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.src as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.8.Z:telnet-1:0.17-65.el7_8.src"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.src",
        "relates_to_product_reference": "7Client-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.8.Z:telnet-1:0.17-65.el7_8.x86_64"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.x86_64",
        "relates_to_product_reference": "7Client-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.ppc64",
        "relates_to_product_reference": "7Client-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
        "relates_to_product_reference": "7Client-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.s390x",
        "relates_to_product_reference": "7Client-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.x86_64",
        "relates_to_product_reference": "7Client-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.ppc64",
        "relates_to_product_reference": "7Client-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.ppc64le",
        "relates_to_product_reference": "7Client-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.s390x",
        "relates_to_product_reference": "7Client-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.x86_64",
        "relates_to_product_reference": "7Client-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.ppc64"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.s390x"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.s390x",
        "relates_to_product_reference": "7ComputeNode-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.src"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.src",
        "relates_to_product_reference": "7ComputeNode-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.x86_64"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.s390x",
        "relates_to_product_reference": "7ComputeNode-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.s390x",
        "relates_to_product_reference": "7ComputeNode-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.8.Z:telnet-1:0.17-65.el7_8.ppc64"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.ppc64",
        "relates_to_product_reference": "7Server-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.ppc64le",
        "relates_to_product_reference": "7Server-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.8.Z:telnet-1:0.17-65.el7_8.s390x"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.s390x",
        "relates_to_product_reference": "7Server-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.src as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.8.Z:telnet-1:0.17-65.el7_8.src"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.src",
        "relates_to_product_reference": "7Server-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.8.Z:telnet-1:0.17-65.el7_8.x86_64"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.x86_64",
        "relates_to_product_reference": "7Server-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.ppc64",
        "relates_to_product_reference": "7Server-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
        "relates_to_product_reference": "7Server-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.s390x",
        "relates_to_product_reference": "7Server-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.x86_64",
        "relates_to_product_reference": "7Server-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.ppc64",
        "relates_to_product_reference": "7Server-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.ppc64le",
        "relates_to_product_reference": "7Server-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.s390x",
        "relates_to_product_reference": "7Server-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.x86_64",
        "relates_to_product_reference": "7Server-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.ppc64"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.ppc64",
        "relates_to_product_reference": "7Workstation-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.ppc64le",
        "relates_to_product_reference": "7Workstation-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.s390x"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.s390x",
        "relates_to_product_reference": "7Workstation-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.src"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.src",
        "relates_to_product_reference": "7Workstation-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_8.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.x86_64"
        },
        "product_reference": "telnet-1:0.17-65.el7_8.x86_64",
        "relates_to_product_reference": "7Workstation-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.ppc64",
        "relates_to_product_reference": "7Workstation-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
        "relates_to_product_reference": "7Workstation-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.s390x",
        "relates_to_product_reference": "7Workstation-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_8.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_8.x86_64",
        "relates_to_product_reference": "7Workstation-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.ppc64",
        "relates_to_product_reference": "7Workstation-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.ppc64le",
        "relates_to_product_reference": "7Workstation-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.s390x",
        "relates_to_product_reference": "7Workstation-7.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_8.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_8.x86_64",
        "relates_to_product_reference": "7Workstation-7.8.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-10188",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2020-03-06T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
            "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
            "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
            "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
            "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
            "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
            "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
            "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
            "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
            "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
            "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
            "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
            "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
            "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
            "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
            "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
            "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1811673"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found where incorrect bounds checks in the telnet server\u2019s (telnetd) handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packets to achieve arbitrary code execution in the telnet server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability exists in the `telnet-server` package, not in the `telnet` client-side package. For a Red Hat Enterprise Linux host to be vulnerable, it must have telnet-server installed and the telnetd service enabled.  Use of telnetd is not recommended, as it is an un-encrypted protocol with cleartext transmission of passwords; alternatives such as openssh are preferred.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.8.Z:telnet-1:0.17-65.el7_8.src",
          "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
          "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
          "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
          "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64",
          "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.src",
          "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
          "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
          "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
          "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64",
          "7Server-7.8.Z:telnet-1:0.17-65.el7_8.src",
          "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
          "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
          "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
          "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64",
          "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.src",
          "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
          "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
          "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
          "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64"
        ],
        "known_not_affected": [
          "7Client-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
          "7Client-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
          "7Client-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
          "7Client-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
          "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
          "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
          "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
          "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
          "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
          "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
          "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
          "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
          "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
          "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
          "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
          "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
          "7Server-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
          "7Server-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
          "7Server-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
          "7Server-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
          "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
          "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
          "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
          "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
          "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
          "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
          "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
          "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
          "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
          "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
          "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
          "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "RHBZ#1811673",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10188",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188"
        }
      ],
      "release_date": "2020-02-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-06T16:41:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.src",
            "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
            "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
            "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
            "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.src",
            "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
            "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
            "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
            "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.src",
            "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
            "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
            "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
            "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.src",
            "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
            "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
            "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
            "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1334"
        },
        {
          "category": "workaround",
          "details": "When in enforcing mode, SELinux as configured in Red Hat Enterprise Linux provides some mitigation against an exploit for telnet-server, because it limits the kind of operations it can perform and programs that can be run from the telnet-server\u0027s context.",
          "product_ids": [
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.src",
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
            "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
            "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
            "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
            "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
            "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
            "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
            "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
            "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.src",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
            "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
            "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
            "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
            "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
            "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
            "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
            "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
            "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.src",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
            "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
            "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
            "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
            "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
            "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
            "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
            "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
            "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.src",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
            "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
            "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
            "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
            "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
            "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
            "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
            "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
            "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.src",
            "7Client-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
            "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
            "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
            "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
            "7Client-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
            "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
            "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
            "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
            "7Client-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.src",
            "7ComputeNode-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
            "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
            "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
            "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
            "7ComputeNode-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
            "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
            "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
            "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
            "7ComputeNode-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.src",
            "7Server-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
            "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
            "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
            "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
            "7Server-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
            "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
            "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
            "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
            "7Server-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.ppc64",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.ppc64le",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.s390x",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.src",
            "7Workstation-7.8.Z:telnet-1:0.17-65.el7_8.x86_64",
            "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64",
            "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.ppc64le",
            "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.s390x",
            "7Workstation-7.8.Z:telnet-debuginfo-1:0.17-65.el7_8.x86_64",
            "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64",
            "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.ppc64le",
            "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.s390x",
            "7Workstation-7.8.Z:telnet-server-1:0.17-65.el7_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for telnet is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Telnet is a popular protocol for logging in to remote systems over the Internet. The telnet-server packages include a telnet service that supports remote logins into the host machine. The telnet service is disabled by default.\n\nSecurity Fix(es):\n\n* telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code (CVE-2020-10188)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:1335",
        "url": "https://access.redhat.com/errata/RHSA-2020:1335"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1811673",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1335.json"
      }
    ],
    "title": "Red Hat Security Advisory: telnet security update",
    "tracking": {
      "current_release_date": "2026-01-21T02:42:06+00:00",
      "generator": {
        "date": "2026-01-21T02:42:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.15"
        }
      },
      "id": "RHSA-2020:1335",
      "initial_release_date": "2020-04-06T16:33:30+00:00",
      "revision_history": [
        {
          "date": "2020-04-06T16:33:30+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-04-06T16:33:30+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-21T02:42:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                  "product_id": "6ComputeNode-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-49.el6_10.i686",
                "product": {
                  "name": "telnet-1:0.17-49.el6_10.i686",
                  "product_id": "telnet-1:0.17-49.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-49.el6_10?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-49.el6_10.i686",
                "product": {
                  "name": "telnet-server-1:0.17-49.el6_10.i686",
                  "product_id": "telnet-server-1:0.17-49.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-49.el6_10?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-49.el6_10.i686",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-49.el6_10.i686",
                  "product_id": "telnet-debuginfo-1:0.17-49.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-49.el6_10?arch=i686\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-49.el6_10.x86_64",
                "product": {
                  "name": "telnet-1:0.17-49.el6_10.x86_64",
                  "product_id": "telnet-1:0.17-49.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-49.el6_10?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-49.el6_10.x86_64",
                "product": {
                  "name": "telnet-server-1:0.17-49.el6_10.x86_64",
                  "product_id": "telnet-server-1:0.17-49.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-49.el6_10?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-49.el6_10.x86_64",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-49.el6_10.x86_64",
                  "product_id": "telnet-debuginfo-1:0.17-49.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-49.el6_10?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-49.el6_10.src",
                "product": {
                  "name": "telnet-1:0.17-49.el6_10.src",
                  "product_id": "telnet-1:0.17-49.el6_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-49.el6_10?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-49.el6_10.s390x",
                "product": {
                  "name": "telnet-1:0.17-49.el6_10.s390x",
                  "product_id": "telnet-1:0.17-49.el6_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-49.el6_10?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-49.el6_10.s390x",
                "product": {
                  "name": "telnet-server-1:0.17-49.el6_10.s390x",
                  "product_id": "telnet-server-1:0.17-49.el6_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-49.el6_10?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-49.el6_10.s390x",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-49.el6_10.s390x",
                  "product_id": "telnet-debuginfo-1:0.17-49.el6_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-49.el6_10?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-49.el6_10.ppc64",
                "product": {
                  "name": "telnet-1:0.17-49.el6_10.ppc64",
                  "product_id": "telnet-1:0.17-49.el6_10.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-49.el6_10?arch=ppc64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-49.el6_10.ppc64",
                "product": {
                  "name": "telnet-server-1:0.17-49.el6_10.ppc64",
                  "product_id": "telnet-server-1:0.17-49.el6_10.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-49.el6_10?arch=ppc64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-49.el6_10.ppc64",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-49.el6_10.ppc64",
                  "product_id": "telnet-debuginfo-1:0.17-49.el6_10.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-49.el6_10?arch=ppc64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:telnet-1:0.17-49.el6_10.i686"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.i686",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:telnet-1:0.17-49.el6_10.ppc64"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.ppc64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:telnet-1:0.17-49.el6_10.s390x"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.s390x",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:telnet-1:0.17-49.el6_10.src"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.src",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:telnet-1:0.17-49.el6_10.x86_64"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.x86_64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.i686",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.ppc64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.s390x",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.x86_64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.i686"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.i686",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.ppc64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.s390x"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.s390x",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.x86_64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.i686"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.i686",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.ppc64"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.s390x"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.s390x",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.src"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.src",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.x86_64"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.i686",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.s390x",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.i686"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.i686",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.s390x"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.s390x",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:telnet-1:0.17-49.el6_10.i686"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.i686",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:telnet-1:0.17-49.el6_10.ppc64"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.ppc64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:telnet-1:0.17-49.el6_10.s390x"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.s390x",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:telnet-1:0.17-49.el6_10.src"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.src",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:telnet-1:0.17-49.el6_10.x86_64"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.x86_64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.i686",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.ppc64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.s390x",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.x86_64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.i686"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.i686",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.ppc64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.s390x"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.s390x",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.x86_64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.i686"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.i686",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.ppc64"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.ppc64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.s390x"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.s390x",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.src"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.src",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-49.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.x86_64"
        },
        "product_reference": "telnet-1:0.17-49.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.i686",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.ppc64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.s390x",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-49.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-49.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.i686"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.i686",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.ppc64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.s390x"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.s390x",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-49.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-49.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-10188",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2020-03-06T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.i686",
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.s390x",
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
            "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
            "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
            "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
            "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.i686",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.s390x",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
            "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
            "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
            "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
            "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.i686",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.s390x",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
            "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
            "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
            "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
            "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.i686",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.s390x",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
            "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
            "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
            "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
            "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1811673"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found where incorrect bounds checks in the telnet server\u2019s (telnetd) handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packets to achieve arbitrary code execution in the telnet server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability exists in the `telnet-server` package, not in the `telnet` client-side package. For a Red Hat Enterprise Linux host to be vulnerable, it must have telnet-server installed and the telnetd service enabled.  Use of telnetd is not recommended, as it is an un-encrypted protocol with cleartext transmission of passwords; alternatives such as openssh are preferred.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:telnet-1:0.17-49.el6_10.src",
          "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
          "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
          "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
          "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64",
          "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.src",
          "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
          "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
          "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
          "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64",
          "6Server-6.10.z:telnet-1:0.17-49.el6_10.src",
          "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
          "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
          "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
          "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64",
          "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.src",
          "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
          "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
          "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
          "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64"
        ],
        "known_not_affected": [
          "6Client-6.10.z:telnet-1:0.17-49.el6_10.i686",
          "6Client-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
          "6Client-6.10.z:telnet-1:0.17-49.el6_10.s390x",
          "6Client-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
          "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
          "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
          "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
          "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
          "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.i686",
          "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
          "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.s390x",
          "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
          "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
          "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
          "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
          "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
          "6Server-6.10.z:telnet-1:0.17-49.el6_10.i686",
          "6Server-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
          "6Server-6.10.z:telnet-1:0.17-49.el6_10.s390x",
          "6Server-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
          "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
          "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
          "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
          "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
          "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.i686",
          "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
          "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.s390x",
          "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
          "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
          "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
          "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
          "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "RHBZ#1811673",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10188",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188"
        }
      ],
      "release_date": "2020-02-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-06T16:33:30+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.src",
            "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
            "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
            "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
            "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.src",
            "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
            "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
            "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
            "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.src",
            "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
            "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
            "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
            "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.src",
            "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
            "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
            "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
            "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1335"
        },
        {
          "category": "workaround",
          "details": "When in enforcing mode, SELinux as configured in Red Hat Enterprise Linux provides some mitigation against an exploit for telnet-server, because it limits the kind of operations it can perform and programs that can be run from the telnet-server\u0027s context.",
          "product_ids": [
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.i686",
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.s390x",
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.src",
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
            "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
            "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
            "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
            "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
            "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
            "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
            "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
            "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.i686",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.s390x",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.src",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
            "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
            "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
            "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
            "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
            "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
            "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
            "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
            "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.i686",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.s390x",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.src",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
            "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
            "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
            "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
            "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
            "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
            "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
            "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
            "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.i686",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.s390x",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.src",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
            "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
            "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
            "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
            "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
            "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
            "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
            "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
            "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.i686",
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.s390x",
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.src",
            "6Client-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
            "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
            "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
            "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
            "6Client-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
            "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
            "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
            "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
            "6Client-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.i686",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.s390x",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.src",
            "6ComputeNode-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
            "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
            "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
            "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
            "6ComputeNode-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
            "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
            "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
            "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
            "6ComputeNode-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.i686",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.s390x",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.src",
            "6Server-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
            "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
            "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
            "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
            "6Server-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
            "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
            "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
            "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
            "6Server-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.i686",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.ppc64",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.s390x",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.src",
            "6Workstation-6.10.z:telnet-1:0.17-49.el6_10.x86_64",
            "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.i686",
            "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.ppc64",
            "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.s390x",
            "6Workstation-6.10.z:telnet-debuginfo-1:0.17-49.el6_10.x86_64",
            "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.i686",
            "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.ppc64",
            "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.s390x",
            "6Workstation-6.10.z:telnet-server-1:0.17-49.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for telnet is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Telnet is a popular protocol for logging in to remote systems over the Internet. The telnet-server packages include a telnet service that supports remote logins into the host machine. The telnet service is disabled by default.\n\nSecurity Fix(es):\n\n* telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code (CVE-2020-10188)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:1342",
        "url": "https://access.redhat.com/errata/RHSA-2020:1342"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1811673",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1342.json"
      }
    ],
    "title": "Red Hat Security Advisory: telnet security update",
    "tracking": {
      "current_release_date": "2026-01-21T02:42:11+00:00",
      "generator": {
        "date": "2026-01-21T02:42:11+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.15"
        }
      },
      "id": "RHSA-2020:1342",
      "initial_release_date": "2020-04-07T07:40:05+00:00",
      "revision_history": [
        {
          "date": "2020-04-07T07:40:05+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-04-07T07:40:05+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-21T02:42:11+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
                  "product_id": "AppStream-8.0.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:8.0::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-73.el8_0.1.ppc64le",
                "product": {
                  "name": "telnet-1:0.17-73.el8_0.1.ppc64le",
                  "product_id": "telnet-1:0.17-73.el8_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-73.el8_0.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-73.el8_0.1.ppc64le",
                "product": {
                  "name": "telnet-server-1:0.17-73.el8_0.1.ppc64le",
                  "product_id": "telnet-server-1:0.17-73.el8_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-73.el8_0.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debugsource-1:0.17-73.el8_0.1.ppc64le",
                "product": {
                  "name": "telnet-debugsource-1:0.17-73.el8_0.1.ppc64le",
                  "product_id": "telnet-debugsource-1:0.17-73.el8_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debugsource@0.17-73.el8_0.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-73.el8_0.1.ppc64le",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-73.el8_0.1.ppc64le",
                  "product_id": "telnet-debuginfo-1:0.17-73.el8_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-73.el8_0.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-debuginfo-1:0.17-73.el8_0.1.ppc64le",
                "product": {
                  "name": "telnet-server-debuginfo-1:0.17-73.el8_0.1.ppc64le",
                  "product_id": "telnet-server-debuginfo-1:0.17-73.el8_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server-debuginfo@0.17-73.el8_0.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-73.el8_0.1.x86_64",
                "product": {
                  "name": "telnet-1:0.17-73.el8_0.1.x86_64",
                  "product_id": "telnet-1:0.17-73.el8_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-73.el8_0.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-73.el8_0.1.x86_64",
                "product": {
                  "name": "telnet-server-1:0.17-73.el8_0.1.x86_64",
                  "product_id": "telnet-server-1:0.17-73.el8_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-73.el8_0.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debugsource-1:0.17-73.el8_0.1.x86_64",
                "product": {
                  "name": "telnet-debugsource-1:0.17-73.el8_0.1.x86_64",
                  "product_id": "telnet-debugsource-1:0.17-73.el8_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debugsource@0.17-73.el8_0.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-73.el8_0.1.x86_64",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-73.el8_0.1.x86_64",
                  "product_id": "telnet-debuginfo-1:0.17-73.el8_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-73.el8_0.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-debuginfo-1:0.17-73.el8_0.1.x86_64",
                "product": {
                  "name": "telnet-server-debuginfo-1:0.17-73.el8_0.1.x86_64",
                  "product_id": "telnet-server-debuginfo-1:0.17-73.el8_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server-debuginfo@0.17-73.el8_0.1?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-73.el8_0.1.src",
                "product": {
                  "name": "telnet-1:0.17-73.el8_0.1.src",
                  "product_id": "telnet-1:0.17-73.el8_0.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-73.el8_0.1?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-73.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.ppc64le"
        },
        "product_reference": "telnet-1:0.17-73.el8_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-73.el8_0.1.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.src"
        },
        "product_reference": "telnet-1:0.17-73.el8_0.1.src",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-73.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.x86_64"
        },
        "product_reference": "telnet-1:0.17-73.el8_0.1.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-73.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:telnet-debuginfo-1:0.17-73.el8_0.1.ppc64le"
        },
        "product_reference": "telnet-debuginfo-1:0.17-73.el8_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-73.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:telnet-debuginfo-1:0.17-73.el8_0.1.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-73.el8_0.1.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debugsource-1:0.17-73.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:telnet-debugsource-1:0.17-73.el8_0.1.ppc64le"
        },
        "product_reference": "telnet-debugsource-1:0.17-73.el8_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debugsource-1:0.17-73.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:telnet-debugsource-1:0.17-73.el8_0.1.x86_64"
        },
        "product_reference": "telnet-debugsource-1:0.17-73.el8_0.1.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-73.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:telnet-server-1:0.17-73.el8_0.1.ppc64le"
        },
        "product_reference": "telnet-server-1:0.17-73.el8_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-73.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:telnet-server-1:0.17-73.el8_0.1.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-73.el8_0.1.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-debuginfo-1:0.17-73.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:telnet-server-debuginfo-1:0.17-73.el8_0.1.ppc64le"
        },
        "product_reference": "telnet-server-debuginfo-1:0.17-73.el8_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-debuginfo-1:0.17-73.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:telnet-server-debuginfo-1:0.17-73.el8_0.1.x86_64"
        },
        "product_reference": "telnet-server-debuginfo-1:0.17-73.el8_0.1.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-10188",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2020-03-06T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.x86_64",
            "AppStream-8.0.0.Z.E4S:telnet-debuginfo-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-debuginfo-1:0.17-73.el8_0.1.x86_64",
            "AppStream-8.0.0.Z.E4S:telnet-debugsource-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-debugsource-1:0.17-73.el8_0.1.x86_64",
            "AppStream-8.0.0.Z.E4S:telnet-server-debuginfo-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-server-debuginfo-1:0.17-73.el8_0.1.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1811673"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found where incorrect bounds checks in the telnet server\u2019s (telnetd) handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packets to achieve arbitrary code execution in the telnet server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability exists in the `telnet-server` package, not in the `telnet` client-side package. For a Red Hat Enterprise Linux host to be vulnerable, it must have telnet-server installed and the telnetd service enabled.  Use of telnetd is not recommended, as it is an un-encrypted protocol with cleartext transmission of passwords; alternatives such as openssh are preferred.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.src",
          "AppStream-8.0.0.Z.E4S:telnet-server-1:0.17-73.el8_0.1.ppc64le",
          "AppStream-8.0.0.Z.E4S:telnet-server-1:0.17-73.el8_0.1.x86_64"
        ],
        "known_not_affected": [
          "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.ppc64le",
          "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.x86_64",
          "AppStream-8.0.0.Z.E4S:telnet-debuginfo-1:0.17-73.el8_0.1.ppc64le",
          "AppStream-8.0.0.Z.E4S:telnet-debuginfo-1:0.17-73.el8_0.1.x86_64",
          "AppStream-8.0.0.Z.E4S:telnet-debugsource-1:0.17-73.el8_0.1.ppc64le",
          "AppStream-8.0.0.Z.E4S:telnet-debugsource-1:0.17-73.el8_0.1.x86_64",
          "AppStream-8.0.0.Z.E4S:telnet-server-debuginfo-1:0.17-73.el8_0.1.ppc64le",
          "AppStream-8.0.0.Z.E4S:telnet-server-debuginfo-1:0.17-73.el8_0.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "RHBZ#1811673",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10188",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188"
        }
      ],
      "release_date": "2020-02-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-07T07:40:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.src",
            "AppStream-8.0.0.Z.E4S:telnet-server-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-server-1:0.17-73.el8_0.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1342"
        },
        {
          "category": "workaround",
          "details": "When in enforcing mode, SELinux as configured in Red Hat Enterprise Linux provides some mitigation against an exploit for telnet-server, because it limits the kind of operations it can perform and programs that can be run from the telnet-server\u0027s context.",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.src",
            "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.x86_64",
            "AppStream-8.0.0.Z.E4S:telnet-debuginfo-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-debuginfo-1:0.17-73.el8_0.1.x86_64",
            "AppStream-8.0.0.Z.E4S:telnet-debugsource-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-debugsource-1:0.17-73.el8_0.1.x86_64",
            "AppStream-8.0.0.Z.E4S:telnet-server-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-server-1:0.17-73.el8_0.1.x86_64",
            "AppStream-8.0.0.Z.E4S:telnet-server-debuginfo-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-server-debuginfo-1:0.17-73.el8_0.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.src",
            "AppStream-8.0.0.Z.E4S:telnet-1:0.17-73.el8_0.1.x86_64",
            "AppStream-8.0.0.Z.E4S:telnet-debuginfo-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-debuginfo-1:0.17-73.el8_0.1.x86_64",
            "AppStream-8.0.0.Z.E4S:telnet-debugsource-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-debugsource-1:0.17-73.el8_0.1.x86_64",
            "AppStream-8.0.0.Z.E4S:telnet-server-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-server-1:0.17-73.el8_0.1.x86_64",
            "AppStream-8.0.0.Z.E4S:telnet-server-debuginfo-1:0.17-73.el8_0.1.ppc64le",
            "AppStream-8.0.0.Z.E4S:telnet-server-debuginfo-1:0.17-73.el8_0.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for krb5-appl is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The krb5-appl packages contain Kerberos-aware versions of telnet, ftp, rsh, and rlogin clients and servers. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and trusted third-party, the Key Distribution Center (KDC).\n\nSecurity Fix(es):\n\n* telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code (CVE-2020-10188)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:1349",
        "url": "https://access.redhat.com/errata/RHSA-2020:1349"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1811673",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1349.json"
      }
    ],
    "title": "Red Hat Security Advisory: krb5-appl security update",
    "tracking": {
      "current_release_date": "2026-01-21T02:42:06+00:00",
      "generator": {
        "date": "2026-01-21T02:42:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.15"
        }
      },
      "id": "RHSA-2020:1349",
      "initial_release_date": "2020-04-07T10:46:31+00:00",
      "revision_history": [
        {
          "date": "2020-04-07T10:46:31+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-04-07T10:46:31+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-21T02:42:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                  "product_id": "6ComputeNode-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-appl-0:1.0.1-10.el6_10.src",
                "product": {
                  "name": "krb5-appl-0:1.0.1-10.el6_10.src",
                  "product_id": "krb5-appl-0:1.0.1-10.el6_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-appl@1.0.1-10.el6_10?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-appl-clients-0:1.0.1-10.el6_10.i686",
                "product": {
                  "name": "krb5-appl-clients-0:1.0.1-10.el6_10.i686",
                  "product_id": "krb5-appl-clients-0:1.0.1-10.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-appl-clients@1.0.1-10.el6_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-servers-0:1.0.1-10.el6_10.i686",
                "product": {
                  "name": "krb5-appl-servers-0:1.0.1-10.el6_10.i686",
                  "product_id": "krb5-appl-servers-0:1.0.1-10.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-appl-servers@1.0.1-10.el6_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
                "product": {
                  "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
                  "product_id": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-appl-debuginfo@1.0.1-10.el6_10?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
                "product": {
                  "name": "krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
                  "product_id": "krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-appl-clients@1.0.1-10.el6_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
                "product": {
                  "name": "krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
                  "product_id": "krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-appl-servers@1.0.1-10.el6_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
                "product": {
                  "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
                  "product_id": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-appl-debuginfo@1.0.1-10.el6_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
                "product": {
                  "name": "krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
                  "product_id": "krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-appl-clients@1.0.1-10.el6_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
                "product": {
                  "name": "krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
                  "product_id": "krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-appl-servers@1.0.1-10.el6_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
                "product": {
                  "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
                  "product_id": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-appl-debuginfo@1.0.1-10.el6_10?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
                "product": {
                  "name": "krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
                  "product_id": "krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-appl-clients@1.0.1-10.el6_10?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
                "product": {
                  "name": "krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
                  "product_id": "krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-appl-servers@1.0.1-10.el6_10?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
                "product": {
                  "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
                  "product_id": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-appl-debuginfo@1.0.1-10.el6_10?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-0:1.0.1-10.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src"
        },
        "product_reference": "krb5-appl-0:1.0.1-10.el6_10.src",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.i686",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.i686",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-0:1.0.1-10.el6_10.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src"
        },
        "product_reference": "krb5-appl-0:1.0.1-10.el6_10.src",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.i686",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.i686",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-0:1.0.1-10.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src"
        },
        "product_reference": "krb5-appl-0:1.0.1-10.el6_10.src",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.i686",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.i686",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-0:1.0.1-10.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src"
        },
        "product_reference": "krb5-appl-0:1.0.1-10.el6_10.src",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.i686",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-0:1.0.1-10.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64"
        },
        "product_reference": "krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64"
        },
        "product_reference": "krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.i686",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-0:1.0.1-10.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64"
        },
        "product_reference": "krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-10188",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2020-03-06T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
            "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
            "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
            "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
            "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
            "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
            "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
            "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
            "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
            "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
            "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
            "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
            "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
            "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
            "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
            "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
            "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
            "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
            "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
            "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
            "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
            "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
            "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
            "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
            "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
            "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
            "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
            "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
            "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
            "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
            "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
            "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1811673"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found where incorrect bounds checks in the telnet server\u2019s (telnetd) handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packets to achieve arbitrary code execution in the telnet server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability exists in the `telnet-server` package, not in the `telnet` client-side package. For a Red Hat Enterprise Linux host to be vulnerable, it must have telnet-server installed and the telnetd service enabled.  Use of telnetd is not recommended, as it is an un-encrypted protocol with cleartext transmission of passwords; alternatives such as openssh are preferred.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
          "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
          "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
          "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
          "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
          "6ComputeNode-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
          "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
          "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
          "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
          "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
          "6Server-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
          "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
          "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
          "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
          "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
          "6Workstation-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
          "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
          "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
          "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
          "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64"
        ],
        "known_not_affected": [
          "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
          "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
          "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
          "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
          "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
          "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
          "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
          "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
          "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
          "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
          "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
          "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
          "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
          "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
          "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
          "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
          "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
          "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
          "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
          "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
          "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
          "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
          "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
          "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
          "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
          "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
          "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
          "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
          "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
          "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
          "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
          "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "RHBZ#1811673",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10188",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188"
        }
      ],
      "release_date": "2020-02-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-07T10:46:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
            "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
            "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
            "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
            "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
            "6ComputeNode-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
            "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
            "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
            "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
            "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
            "6Server-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
            "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
            "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
            "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
            "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
            "6Workstation-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
            "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
            "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
            "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
            "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1349"
        },
        {
          "category": "workaround",
          "details": "When in enforcing mode, SELinux as configured in Red Hat Enterprise Linux provides some mitigation against an exploit for telnet-server, because it limits the kind of operations it can perform and programs that can be run from the telnet-server\u0027s context.",
          "product_ids": [
            "6Client-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
            "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
            "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
            "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
            "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
            "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
            "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
            "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
            "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
            "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
            "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
            "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
            "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
            "6ComputeNode-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
            "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
            "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
            "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
            "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
            "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
            "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
            "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
            "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
            "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
            "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
            "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
            "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
            "6Server-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
            "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
            "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
            "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
            "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
            "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
            "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
            "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
            "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
            "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
            "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
            "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
            "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
            "6Workstation-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
            "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
            "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
            "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
            "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
            "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
            "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
            "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
            "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
            "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
            "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
            "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
            "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
            "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
            "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
            "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
            "6Client-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
            "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
            "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
            "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
            "6Client-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
            "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
            "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
            "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
            "6Client-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
            "6ComputeNode-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
            "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
            "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
            "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
            "6ComputeNode-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
            "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
            "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
            "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
            "6ComputeNode-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
            "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
            "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
            "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
            "6ComputeNode-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
            "6Server-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
            "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
            "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
            "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
            "6Server-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
            "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
            "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
            "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
            "6Server-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
            "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
            "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
            "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
            "6Server-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64",
            "6Workstation-6.10.z:krb5-appl-0:1.0.1-10.el6_10.src",
            "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.i686",
            "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.ppc64",
            "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.s390x",
            "6Workstation-6.10.z:krb5-appl-clients-0:1.0.1-10.el6_10.x86_64",
            "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.i686",
            "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.ppc64",
            "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.s390x",
            "6Workstation-6.10.z:krb5-appl-debuginfo-0:1.0.1-10.el6_10.x86_64",
            "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.i686",
            "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.ppc64",
            "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.s390x",
            "6Workstation-6.10.z:krb5-appl-servers-0:1.0.1-10.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for telnet is now available for Red Hat Enterprise Linux 7.6 Advanced Update Support, Red Hat Enterprise Linux 7.6 Telco Extended Update Support, and Red Hat Enterprise Linux 7.6 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Telnet is a popular protocol for logging in to remote systems over the Internet. The telnet-server packages include a telnet service that supports remote logins into the host machine. The telnet service is disabled by default.\n\nSecurity Fix(es):\n\n* telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code (CVE-2020-10188)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0011",
        "url": "https://access.redhat.com/errata/RHSA-2022:0011"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1811673",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0011.json"
      }
    ],
    "title": "Red Hat Security Advisory: telnet security update",
    "tracking": {
      "current_release_date": "2026-01-21T02:42:06+00:00",
      "generator": {
        "date": "2026-01-21T02:42:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.15"
        }
      },
      "id": "RHSA-2022:0011",
      "initial_release_date": "2022-01-04T08:38:23+00:00",
      "revision_history": [
        {
          "date": "2022-01-04T08:38:23+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-01-04T08:38:23+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-21T02:42:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server AUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server AUS (v. 7.6)",
                  "product_id": "7Server-7.6.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:7.6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server E4S (v. 7.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server E4S (v. 7.6)",
                  "product_id": "7Server-7.6.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_e4s:7.6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server TUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server TUS (v. 7.6)",
                  "product_id": "7Server-7.6.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_tus:7.6::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-65.el7_6.src",
                "product": {
                  "name": "telnet-1:0.17-65.el7_6.src",
                  "product_id": "telnet-1:0.17-65.el7_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-65.el7_6?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-65.el7_6.x86_64",
                "product": {
                  "name": "telnet-1:0.17-65.el7_6.x86_64",
                  "product_id": "telnet-1:0.17-65.el7_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-65.el7_6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-65.el7_6.x86_64",
                "product": {
                  "name": "telnet-server-1:0.17-65.el7_6.x86_64",
                  "product_id": "telnet-server-1:0.17-65.el7_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-65.el7_6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-65.el7_6.x86_64",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-65.el7_6.x86_64",
                  "product_id": "telnet-debuginfo-1:0.17-65.el7_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-65.el7_6?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-65.el7_6.ppc64le",
                "product": {
                  "name": "telnet-1:0.17-65.el7_6.ppc64le",
                  "product_id": "telnet-1:0.17-65.el7_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-65.el7_6?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-65.el7_6.ppc64le",
                "product": {
                  "name": "telnet-server-1:0.17-65.el7_6.ppc64le",
                  "product_id": "telnet-server-1:0.17-65.el7_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-65.el7_6?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-65.el7_6.ppc64le",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-65.el7_6.ppc64le",
                  "product_id": "telnet-debuginfo-1:0.17-65.el7_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-65.el7_6?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_6.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.6)",
          "product_id": "7Server-7.6.AUS:telnet-1:0.17-65.el7_6.src"
        },
        "product_reference": "telnet-1:0.17-65.el7_6.src",
        "relates_to_product_reference": "7Server-7.6.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.6)",
          "product_id": "7Server-7.6.AUS:telnet-1:0.17-65.el7_6.x86_64"
        },
        "product_reference": "telnet-1:0.17-65.el7_6.x86_64",
        "relates_to_product_reference": "7Server-7.6.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.6)",
          "product_id": "7Server-7.6.AUS:telnet-debuginfo-1:0.17-65.el7_6.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_6.x86_64",
        "relates_to_product_reference": "7Server-7.6.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.6)",
          "product_id": "7Server-7.6.AUS:telnet-server-1:0.17-65.el7_6.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_6.x86_64",
        "relates_to_product_reference": "7Server-7.6.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.6)",
          "product_id": "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.ppc64le"
        },
        "product_reference": "telnet-1:0.17-65.el7_6.ppc64le",
        "relates_to_product_reference": "7Server-7.6.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_6.src as a component of Red Hat Enterprise Linux Server E4S (v. 7.6)",
          "product_id": "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.src"
        },
        "product_reference": "telnet-1:0.17-65.el7_6.src",
        "relates_to_product_reference": "7Server-7.6.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.6)",
          "product_id": "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.x86_64"
        },
        "product_reference": "telnet-1:0.17-65.el7_6.x86_64",
        "relates_to_product_reference": "7Server-7.6.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.6)",
          "product_id": "7Server-7.6.E4S:telnet-debuginfo-1:0.17-65.el7_6.ppc64le"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_6.ppc64le",
        "relates_to_product_reference": "7Server-7.6.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.6)",
          "product_id": "7Server-7.6.E4S:telnet-debuginfo-1:0.17-65.el7_6.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_6.x86_64",
        "relates_to_product_reference": "7Server-7.6.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.6)",
          "product_id": "7Server-7.6.E4S:telnet-server-1:0.17-65.el7_6.ppc64le"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_6.ppc64le",
        "relates_to_product_reference": "7Server-7.6.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.6)",
          "product_id": "7Server-7.6.E4S:telnet-server-1:0.17-65.el7_6.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_6.x86_64",
        "relates_to_product_reference": "7Server-7.6.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_6.src as a component of Red Hat Enterprise Linux Server TUS (v. 7.6)",
          "product_id": "7Server-7.6.TUS:telnet-1:0.17-65.el7_6.src"
        },
        "product_reference": "telnet-1:0.17-65.el7_6.src",
        "relates_to_product_reference": "7Server-7.6.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.6)",
          "product_id": "7Server-7.6.TUS:telnet-1:0.17-65.el7_6.x86_64"
        },
        "product_reference": "telnet-1:0.17-65.el7_6.x86_64",
        "relates_to_product_reference": "7Server-7.6.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.6)",
          "product_id": "7Server-7.6.TUS:telnet-debuginfo-1:0.17-65.el7_6.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_6.x86_64",
        "relates_to_product_reference": "7Server-7.6.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.6)",
          "product_id": "7Server-7.6.TUS:telnet-server-1:0.17-65.el7_6.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_6.x86_64",
        "relates_to_product_reference": "7Server-7.6.TUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-10188",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2020-03-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1811673"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found where incorrect bounds checks in the telnet server\u2019s (telnetd) handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packets to achieve arbitrary code execution in the telnet server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability exists in the `telnet-server` package, not in the `telnet` client-side package. For a Red Hat Enterprise Linux host to be vulnerable, it must have telnet-server installed and the telnetd service enabled.  Use of telnetd is not recommended, as it is an un-encrypted protocol with cleartext transmission of passwords; alternatives such as openssh are preferred.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-7.6.AUS:telnet-1:0.17-65.el7_6.src",
          "7Server-7.6.AUS:telnet-1:0.17-65.el7_6.x86_64",
          "7Server-7.6.AUS:telnet-debuginfo-1:0.17-65.el7_6.x86_64",
          "7Server-7.6.AUS:telnet-server-1:0.17-65.el7_6.x86_64",
          "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.ppc64le",
          "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.src",
          "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.x86_64",
          "7Server-7.6.E4S:telnet-debuginfo-1:0.17-65.el7_6.ppc64le",
          "7Server-7.6.E4S:telnet-debuginfo-1:0.17-65.el7_6.x86_64",
          "7Server-7.6.E4S:telnet-server-1:0.17-65.el7_6.ppc64le",
          "7Server-7.6.E4S:telnet-server-1:0.17-65.el7_6.x86_64",
          "7Server-7.6.TUS:telnet-1:0.17-65.el7_6.src",
          "7Server-7.6.TUS:telnet-1:0.17-65.el7_6.x86_64",
          "7Server-7.6.TUS:telnet-debuginfo-1:0.17-65.el7_6.x86_64",
          "7Server-7.6.TUS:telnet-server-1:0.17-65.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "RHBZ#1811673",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10188",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188"
        }
      ],
      "release_date": "2020-02-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-01-04T08:38:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-7.6.AUS:telnet-1:0.17-65.el7_6.src",
            "7Server-7.6.AUS:telnet-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.AUS:telnet-debuginfo-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.AUS:telnet-server-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.ppc64le",
            "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.src",
            "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.E4S:telnet-debuginfo-1:0.17-65.el7_6.ppc64le",
            "7Server-7.6.E4S:telnet-debuginfo-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.E4S:telnet-server-1:0.17-65.el7_6.ppc64le",
            "7Server-7.6.E4S:telnet-server-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.TUS:telnet-1:0.17-65.el7_6.src",
            "7Server-7.6.TUS:telnet-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.TUS:telnet-debuginfo-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.TUS:telnet-server-1:0.17-65.el7_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0011"
        },
        {
          "category": "workaround",
          "details": "When in enforcing mode, SELinux as configured in Red Hat Enterprise Linux provides some mitigation against an exploit for telnet-server, because it limits the kind of operations it can perform and programs that can be run from the telnet-server\u0027s context.",
          "product_ids": [
            "7Server-7.6.AUS:telnet-1:0.17-65.el7_6.src",
            "7Server-7.6.AUS:telnet-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.AUS:telnet-debuginfo-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.AUS:telnet-server-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.ppc64le",
            "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.src",
            "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.E4S:telnet-debuginfo-1:0.17-65.el7_6.ppc64le",
            "7Server-7.6.E4S:telnet-debuginfo-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.E4S:telnet-server-1:0.17-65.el7_6.ppc64le",
            "7Server-7.6.E4S:telnet-server-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.TUS:telnet-1:0.17-65.el7_6.src",
            "7Server-7.6.TUS:telnet-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.TUS:telnet-debuginfo-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.TUS:telnet-server-1:0.17-65.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-7.6.AUS:telnet-1:0.17-65.el7_6.src",
            "7Server-7.6.AUS:telnet-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.AUS:telnet-debuginfo-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.AUS:telnet-server-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.ppc64le",
            "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.src",
            "7Server-7.6.E4S:telnet-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.E4S:telnet-debuginfo-1:0.17-65.el7_6.ppc64le",
            "7Server-7.6.E4S:telnet-debuginfo-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.E4S:telnet-server-1:0.17-65.el7_6.ppc64le",
            "7Server-7.6.E4S:telnet-server-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.TUS:telnet-1:0.17-65.el7_6.src",
            "7Server-7.6.TUS:telnet-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.TUS:telnet-debuginfo-1:0.17-65.el7_6.x86_64",
            "7Server-7.6.TUS:telnet-server-1:0.17-65.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for telnet is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Support, and Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Telnet is a popular protocol for logging in to remote systems over the Internet. The telnet-server packages include a telnet service that supports remote logins into the host machine. The telnet service is disabled by default.\n\nSecurity Fix(es):\n\n* telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code (CVE-2020-10188)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0158",
        "url": "https://access.redhat.com/errata/RHSA-2022:0158"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1811673",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0158.json"
      }
    ],
    "title": "Red Hat Security Advisory: telnet security update",
    "tracking": {
      "current_release_date": "2026-01-21T02:42:08+00:00",
      "generator": {
        "date": "2026-01-21T02:42:08+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.15"
        }
      },
      "id": "RHSA-2022:0158",
      "initial_release_date": "2022-01-18T09:16:45+00:00",
      "revision_history": [
        {
          "date": "2022-01-18T09:16:45+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-01-18T09:16:45+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-21T02:42:08+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server AUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server AUS (v. 7.7)",
                  "product_id": "7Server-7.7.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:7.7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server E4S (v. 7.7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server E4S (v. 7.7)",
                  "product_id": "7Server-7.7.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_e4s:7.7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server TUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server TUS (v. 7.7)",
                  "product_id": "7Server-7.7.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_tus:7.7::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-65.el7_7.src",
                "product": {
                  "name": "telnet-1:0.17-65.el7_7.src",
                  "product_id": "telnet-1:0.17-65.el7_7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-65.el7_7?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-65.el7_7.x86_64",
                "product": {
                  "name": "telnet-1:0.17-65.el7_7.x86_64",
                  "product_id": "telnet-1:0.17-65.el7_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-65.el7_7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-65.el7_7.x86_64",
                "product": {
                  "name": "telnet-server-1:0.17-65.el7_7.x86_64",
                  "product_id": "telnet-server-1:0.17-65.el7_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-65.el7_7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-65.el7_7.x86_64",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-65.el7_7.x86_64",
                  "product_id": "telnet-debuginfo-1:0.17-65.el7_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-65.el7_7?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "telnet-1:0.17-65.el7_7.ppc64le",
                "product": {
                  "name": "telnet-1:0.17-65.el7_7.ppc64le",
                  "product_id": "telnet-1:0.17-65.el7_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet@0.17-65.el7_7?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-server-1:0.17-65.el7_7.ppc64le",
                "product": {
                  "name": "telnet-server-1:0.17-65.el7_7.ppc64le",
                  "product_id": "telnet-server-1:0.17-65.el7_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-server@0.17-65.el7_7?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "telnet-debuginfo-1:0.17-65.el7_7.ppc64le",
                "product": {
                  "name": "telnet-debuginfo-1:0.17-65.el7_7.ppc64le",
                  "product_id": "telnet-debuginfo-1:0.17-65.el7_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/telnet-debuginfo@0.17-65.el7_7?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_7.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
          "product_id": "7Server-7.7.AUS:telnet-1:0.17-65.el7_7.src"
        },
        "product_reference": "telnet-1:0.17-65.el7_7.src",
        "relates_to_product_reference": "7Server-7.7.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
          "product_id": "7Server-7.7.AUS:telnet-1:0.17-65.el7_7.x86_64"
        },
        "product_reference": "telnet-1:0.17-65.el7_7.x86_64",
        "relates_to_product_reference": "7Server-7.7.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
          "product_id": "7Server-7.7.AUS:telnet-debuginfo-1:0.17-65.el7_7.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_7.x86_64",
        "relates_to_product_reference": "7Server-7.7.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
          "product_id": "7Server-7.7.AUS:telnet-server-1:0.17-65.el7_7.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_7.x86_64",
        "relates_to_product_reference": "7Server-7.7.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.7)",
          "product_id": "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.ppc64le"
        },
        "product_reference": "telnet-1:0.17-65.el7_7.ppc64le",
        "relates_to_product_reference": "7Server-7.7.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_7.src as a component of Red Hat Enterprise Linux Server E4S (v. 7.7)",
          "product_id": "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.src"
        },
        "product_reference": "telnet-1:0.17-65.el7_7.src",
        "relates_to_product_reference": "7Server-7.7.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.7)",
          "product_id": "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.x86_64"
        },
        "product_reference": "telnet-1:0.17-65.el7_7.x86_64",
        "relates_to_product_reference": "7Server-7.7.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.7)",
          "product_id": "7Server-7.7.E4S:telnet-debuginfo-1:0.17-65.el7_7.ppc64le"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_7.ppc64le",
        "relates_to_product_reference": "7Server-7.7.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.7)",
          "product_id": "7Server-7.7.E4S:telnet-debuginfo-1:0.17-65.el7_7.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_7.x86_64",
        "relates_to_product_reference": "7Server-7.7.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.7)",
          "product_id": "7Server-7.7.E4S:telnet-server-1:0.17-65.el7_7.ppc64le"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_7.ppc64le",
        "relates_to_product_reference": "7Server-7.7.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.7)",
          "product_id": "7Server-7.7.E4S:telnet-server-1:0.17-65.el7_7.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_7.x86_64",
        "relates_to_product_reference": "7Server-7.7.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_7.src as a component of Red Hat Enterprise Linux Server TUS (v. 7.7)",
          "product_id": "7Server-7.7.TUS:telnet-1:0.17-65.el7_7.src"
        },
        "product_reference": "telnet-1:0.17-65.el7_7.src",
        "relates_to_product_reference": "7Server-7.7.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-1:0.17-65.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.7)",
          "product_id": "7Server-7.7.TUS:telnet-1:0.17-65.el7_7.x86_64"
        },
        "product_reference": "telnet-1:0.17-65.el7_7.x86_64",
        "relates_to_product_reference": "7Server-7.7.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-debuginfo-1:0.17-65.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.7)",
          "product_id": "7Server-7.7.TUS:telnet-debuginfo-1:0.17-65.el7_7.x86_64"
        },
        "product_reference": "telnet-debuginfo-1:0.17-65.el7_7.x86_64",
        "relates_to_product_reference": "7Server-7.7.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "telnet-server-1:0.17-65.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.7)",
          "product_id": "7Server-7.7.TUS:telnet-server-1:0.17-65.el7_7.x86_64"
        },
        "product_reference": "telnet-server-1:0.17-65.el7_7.x86_64",
        "relates_to_product_reference": "7Server-7.7.TUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-10188",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2020-03-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1811673"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found where incorrect bounds checks in the telnet server\u2019s (telnetd) handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packets to achieve arbitrary code execution in the telnet server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability exists in the `telnet-server` package, not in the `telnet` client-side package. For a Red Hat Enterprise Linux host to be vulnerable, it must have telnet-server installed and the telnetd service enabled.  Use of telnetd is not recommended, as it is an un-encrypted protocol with cleartext transmission of passwords; alternatives such as openssh are preferred.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-7.7.AUS:telnet-1:0.17-65.el7_7.src",
          "7Server-7.7.AUS:telnet-1:0.17-65.el7_7.x86_64",
          "7Server-7.7.AUS:telnet-debuginfo-1:0.17-65.el7_7.x86_64",
          "7Server-7.7.AUS:telnet-server-1:0.17-65.el7_7.x86_64",
          "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.ppc64le",
          "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.src",
          "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.x86_64",
          "7Server-7.7.E4S:telnet-debuginfo-1:0.17-65.el7_7.ppc64le",
          "7Server-7.7.E4S:telnet-debuginfo-1:0.17-65.el7_7.x86_64",
          "7Server-7.7.E4S:telnet-server-1:0.17-65.el7_7.ppc64le",
          "7Server-7.7.E4S:telnet-server-1:0.17-65.el7_7.x86_64",
          "7Server-7.7.TUS:telnet-1:0.17-65.el7_7.src",
          "7Server-7.7.TUS:telnet-1:0.17-65.el7_7.x86_64",
          "7Server-7.7.TUS:telnet-debuginfo-1:0.17-65.el7_7.x86_64",
          "7Server-7.7.TUS:telnet-server-1:0.17-65.el7_7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "RHBZ#1811673",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811673"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10188",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10188"
        }
      ],
      "release_date": "2020-02-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-01-18T09:16:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-7.7.AUS:telnet-1:0.17-65.el7_7.src",
            "7Server-7.7.AUS:telnet-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.AUS:telnet-debuginfo-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.AUS:telnet-server-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.ppc64le",
            "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.src",
            "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.E4S:telnet-debuginfo-1:0.17-65.el7_7.ppc64le",
            "7Server-7.7.E4S:telnet-debuginfo-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.E4S:telnet-server-1:0.17-65.el7_7.ppc64le",
            "7Server-7.7.E4S:telnet-server-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.TUS:telnet-1:0.17-65.el7_7.src",
            "7Server-7.7.TUS:telnet-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.TUS:telnet-debuginfo-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.TUS:telnet-server-1:0.17-65.el7_7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0158"
        },
        {
          "category": "workaround",
          "details": "When in enforcing mode, SELinux as configured in Red Hat Enterprise Linux provides some mitigation against an exploit for telnet-server, because it limits the kind of operations it can perform and programs that can be run from the telnet-server\u0027s context.",
          "product_ids": [
            "7Server-7.7.AUS:telnet-1:0.17-65.el7_7.src",
            "7Server-7.7.AUS:telnet-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.AUS:telnet-debuginfo-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.AUS:telnet-server-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.ppc64le",
            "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.src",
            "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.E4S:telnet-debuginfo-1:0.17-65.el7_7.ppc64le",
            "7Server-7.7.E4S:telnet-debuginfo-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.E4S:telnet-server-1:0.17-65.el7_7.ppc64le",
            "7Server-7.7.E4S:telnet-server-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.TUS:telnet-1:0.17-65.el7_7.src",
            "7Server-7.7.TUS:telnet-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.TUS:telnet-debuginfo-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.TUS:telnet-server-1:0.17-65.el7_7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-7.7.AUS:telnet-1:0.17-65.el7_7.src",
            "7Server-7.7.AUS:telnet-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.AUS:telnet-debuginfo-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.AUS:telnet-server-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.ppc64le",
            "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.src",
            "7Server-7.7.E4S:telnet-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.E4S:telnet-debuginfo-1:0.17-65.el7_7.ppc64le",
            "7Server-7.7.E4S:telnet-debuginfo-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.E4S:telnet-server-1:0.17-65.el7_7.ppc64le",
            "7Server-7.7.E4S:telnet-server-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.TUS:telnet-1:0.17-65.el7_7.src",
            "7Server-7.7.TUS:telnet-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.TUS:telnet-debuginfo-1:0.17-65.el7_7.x86_64",
            "7Server-7.7.TUS:telnet-server-1:0.17-65.el7_7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for krb5-appl",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for krb5-appl fixes the following issues:\n\n- CVE-2020-10188: Fixed a remote root execution (bsc#1165787).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "HPE-Helion-OpenStack-8-2020-1533,SUSE-2020-1533,SUSE-OpenStack-Cloud-7-2020-1533,SUSE-OpenStack-Cloud-8-2020-1533,SUSE-OpenStack-Cloud-Crowbar-8-2020-1533,SUSE-SLE-SAP-12-SP2-2020-1533,SUSE-SLE-SAP-12-SP3-2020-1533,SUSE-SLE-SERVER-12-SP2-2020-1533,SUSE-SLE-SERVER-12-SP2-BCL-2020-1533,SUSE-SLE-SERVER-12-SP3-2020-1533,SUSE-SLE-SERVER-12-SP3-BCL-2020-1533,SUSE-SLE-SERVER-12-SP4-2020-1533,SUSE-SLE-SERVER-12-SP5-2020-1533,SUSE-Storage-5-2020-1533",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_1533-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2020:1533-1",
        "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20201533-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2020:1533-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-June/006882.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165787",
        "url": "https://bugzilla.suse.com/1165787"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-10188 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-10188/"
      }
    ],
    "title": "Security update for krb5-appl",
    "tracking": {
      "current_release_date": "2020-06-04T08:31:36Z",
      "generator": {
        "date": "2020-06-04T08:31:36Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2020:1533-1",
      "initial_release_date": "2020-06-04T08:31:36Z",
      "revision_history": [
        {
          "date": "2020-06-04T08:31:36Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-appl-clients-1.0.3-3.3.1.aarch64",
                "product": {
                  "name": "krb5-appl-clients-1.0.3-3.3.1.aarch64",
                  "product_id": "krb5-appl-clients-1.0.3-3.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-servers-1.0.3-3.3.1.aarch64",
                "product": {
                  "name": "krb5-appl-servers-1.0.3-3.3.1.aarch64",
                  "product_id": "krb5-appl-servers-1.0.3-3.3.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-appl-clients-1.0.3-3.3.1.i586",
                "product": {
                  "name": "krb5-appl-clients-1.0.3-3.3.1.i586",
                  "product_id": "krb5-appl-clients-1.0.3-3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-servers-1.0.3-3.3.1.i586",
                "product": {
                  "name": "krb5-appl-servers-1.0.3-3.3.1.i586",
                  "product_id": "krb5-appl-servers-1.0.3-3.3.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-appl-clients-1.0.3-3.3.1.ppc64le",
                "product": {
                  "name": "krb5-appl-clients-1.0.3-3.3.1.ppc64le",
                  "product_id": "krb5-appl-clients-1.0.3-3.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-servers-1.0.3-3.3.1.ppc64le",
                "product": {
                  "name": "krb5-appl-servers-1.0.3-3.3.1.ppc64le",
                  "product_id": "krb5-appl-servers-1.0.3-3.3.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-appl-clients-1.0.3-3.3.1.s390",
                "product": {
                  "name": "krb5-appl-clients-1.0.3-3.3.1.s390",
                  "product_id": "krb5-appl-clients-1.0.3-3.3.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-servers-1.0.3-3.3.1.s390",
                "product": {
                  "name": "krb5-appl-servers-1.0.3-3.3.1.s390",
                  "product_id": "krb5-appl-servers-1.0.3-3.3.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-appl-clients-1.0.3-3.3.1.s390x",
                "product": {
                  "name": "krb5-appl-clients-1.0.3-3.3.1.s390x",
                  "product_id": "krb5-appl-clients-1.0.3-3.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-servers-1.0.3-3.3.1.s390x",
                "product": {
                  "name": "krb5-appl-servers-1.0.3-3.3.1.s390x",
                  "product_id": "krb5-appl-servers-1.0.3-3.3.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
                "product": {
                  "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
                  "product_id": "krb5-appl-clients-1.0.3-3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
                "product": {
                  "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
                  "product_id": "krb5-appl-servers-1.0.3-3.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "HPE Helion OpenStack 8",
                "product": {
                  "name": "HPE Helion OpenStack 8",
                  "product_id": "HPE Helion OpenStack 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:hpe-helion-openstack:8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 7",
                "product": {
                  "name": "SUSE OpenStack Cloud 7",
                  "product_id": "SUSE OpenStack Cloud 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud:7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 8",
                "product": {
                  "name": "SUSE OpenStack Cloud 8",
                  "product_id": "SUSE OpenStack Cloud 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud:8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud Crowbar 8",
                "product": {
                  "name": "SUSE OpenStack Cloud Crowbar 8",
                  "product_id": "SUSE OpenStack Cloud Crowbar 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2-BCL",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2-BCL",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-bcl:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP3-BCL",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP3-BCL",
                  "product_id": "SUSE Linux Enterprise Server 12 SP3-BCL",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-bcl:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP4",
                  "product_id": "SUSE Linux Enterprise Server 12 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 5",
                "product": {
                  "name": "SUSE Enterprise Storage 5",
                  "product_id": "SUSE Enterprise Storage 5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of HPE Helion OpenStack 8",
          "product_id": "HPE Helion OpenStack 8:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "HPE Helion OpenStack 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of HPE Helion OpenStack 8",
          "product_id": "HPE Helion OpenStack 8:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "HPE Helion OpenStack 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:krb5-appl-clients-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:krb5-appl-servers-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE OpenStack Cloud 8",
          "product_id": "SUSE OpenStack Cloud 8:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE OpenStack Cloud 8",
          "product_id": "SUSE OpenStack Cloud 8:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
          "product_id": "SUSE OpenStack Cloud Crowbar 8:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
          "product_id": "SUSE OpenStack Cloud Crowbar 8:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-clients-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-servers-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-clients-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-servers-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-clients-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-clients-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-servers-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-servers-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.aarch64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.aarch64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.aarch64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.aarch64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.aarch64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.aarch64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.aarch64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.aarch64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.aarch64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.aarch64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.ppc64le"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.s390x"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.aarch64 as component of SUSE Enterprise Storage 5",
          "product_id": "SUSE Enterprise Storage 5:krb5-appl-clients-1.0.3-3.3.1.aarch64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-clients-1.0.3-3.3.1.x86_64 as component of SUSE Enterprise Storage 5",
          "product_id": "SUSE Enterprise Storage 5:krb5-appl-clients-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-clients-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.aarch64 as component of SUSE Enterprise Storage 5",
          "product_id": "SUSE Enterprise Storage 5:krb5-appl-servers-1.0.3-3.3.1.aarch64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-appl-servers-1.0.3-3.3.1.x86_64 as component of SUSE Enterprise Storage 5",
          "product_id": "SUSE Enterprise Storage 5:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        },
        "product_reference": "krb5-appl-servers-1.0.3-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-10188",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-10188"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "HPE Helion OpenStack 8:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "HPE Helion OpenStack 8:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE Enterprise Storage 5:krb5-appl-clients-1.0.3-3.3.1.aarch64",
          "SUSE Enterprise Storage 5:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE Enterprise Storage 5:krb5-appl-servers-1.0.3-3.3.1.aarch64",
          "SUSE Enterprise Storage 5:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-clients-1.0.3-3.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-servers-1.0.3-3.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-BCL:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:krb5-appl-clients-1.0.3-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:krb5-appl-servers-1.0.3-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE OpenStack Cloud 8:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE OpenStack Cloud 8:krb5-appl-servers-1.0.3-3.3.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:krb5-appl-clients-1.0.3-3.3.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:krb5-appl-servers-1.0.3-3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-10188",
          "url": "https://www.suse.com/security/cve/CVE-2020-10188"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165787 for CVE-2020-10188",
          "url": "https://bugzilla.suse.com/1165787"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "HPE Helion OpenStack 8:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "HPE Helion OpenStack 8:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Enterprise Storage 5:krb5-appl-clients-1.0.3-3.3.1.aarch64",
            "SUSE Enterprise Storage 5:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Enterprise Storage 5:krb5-appl-servers-1.0.3-3.3.1.aarch64",
            "SUSE Enterprise Storage 5:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE OpenStack Cloud 8:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE OpenStack Cloud 8:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:krb5-appl-servers-1.0.3-3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "HPE Helion OpenStack 8:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "HPE Helion OpenStack 8:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Enterprise Storage 5:krb5-appl-clients-1.0.3-3.3.1.aarch64",
            "SUSE Enterprise Storage 5:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Enterprise Storage 5:krb5-appl-servers-1.0.3-3.3.1.aarch64",
            "SUSE Enterprise Storage 5:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-BCL:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:krb5-appl-clients-1.0.3-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:krb5-appl-servers-1.0.3-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE OpenStack Cloud 8:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE OpenStack Cloud 8:krb5-appl-servers-1.0.3-3.3.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:krb5-appl-clients-1.0.3-3.3.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:krb5-appl-servers-1.0.3-3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-06-04T08:31:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-10188"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "HP-UX ist ein Unix Betriebssystem von HP.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle im Telnet Daemon von HPE HP-UX ausnutzen, um beliebigen Programmcode auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-0798 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2025-0798.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-0798 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0798"
      },
      {
        "category": "external",
        "summary": "HPE SECURITY BULLETIN HPESBUX04206 rev.1 vom 2022-01-10",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?elq_mid=17739\u0026elq_cid=67018031\u0026docId=hpesbux04206en_us"
      },
      {
        "category": "external",
        "summary": "HPE Advisory vom 2025-04-14",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbux04206en_us\u0026docLocale=en_US"
      }
    ],
    "source_lang": "en-US",
    "title": "HPE HP-UX: Schwachstelle erm\u00f6glicht Codeausf\u00fchrung",
    "tracking": {
      "current_release_date": "2025-04-14T22:00:00.000+00:00",
      "generator": {
        "date": "2025-04-15T11:13:45.825+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2025-0798",
      "initial_release_date": "2022-01-10T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-01-10T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-04-14T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates aufgenommen"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "11.31 PHNE_42509",
                "product": {
                  "name": "HPE HP-UX 11.31 PHNE_42509",
                  "product_id": "T021502",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:hp:hp-ux:11.31:phne_42509"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "11.31 \u003cPHNE_44954",
                "product": {
                  "name": "HPE HP-UX 11.31 \u003cPHNE_44954",
                  "product_id": "T042767"
                }
              },
              {
                "category": "product_version",
                "name": "11.31 PHNE_44954",
                "product": {
                  "name": "HPE HP-UX 11.31 PHNE_44954",
                  "product_id": "T042767-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:hp:hp-ux:11.31__phne_44954"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "HP-UX"
          }
        ],
        "category": "vendor",
        "name": "HPE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-10188",
      "product_status": {
        "known_affected": [
          "T042767",
          "T021502"
        ]
      },
      "release_date": "2022-01-10T23:00:00.000+00:00",
      "title": "CVE-2020-10188"
    }
  ]
}