Erik Auerswald writes:
> On Thu, Dec 23, 2021 at 09:15:59PM +0800, AiDai wrote:
>> Line 1: # NULL Pointer Dereference in help() at
>> inetutils/telnet/commands.c:3094
>
> Thanks for fuzzing GNU inetutils!
Hi AiDai and Erik. Thanks for the report, debugging and patch!
I
Hi,
On Thu, Dec 23, 2021 at 09:15:59PM +0800, AiDai wrote:
> Line 1: # NULL Pointer Dereference in help() at
> inetutils/telnet/commands.c:3094
Thanks for fuzzing GNU inetutils!
> AiDai 于2021年12月23日周四 21:13写道：
>
> > **command:**
> >
> > ```
> > ./telnet <
**command:**
```
./telnet < ./poc
```
AiDai 于2021年12月23日周四 21:11写道：
> # NULL Pointer Dereference in setnmap() at cmds.c:2303
>
> ## Description
>
> A NULL Pointer Dereference was discovered in help() at
> inetutils/telnet/commands.c:3094. The vulnerability causes a segmentation
> fault and
# NULL Pointer Dereference in setnmap() at cmds.c:2303
## Description
A NULL Pointer Dereference was discovered in help() at
inetutils/telnet/commands.c:3094. The vulnerability causes a segmentation
fault and application crash.
**version**
```
./telnet --version
telnet (GNU inetutils)
URL:
<https://savannah.gnu.org/bugs/?61725>
Summary: NULL Pointer Dereference in help() at
inetutils/telnet/commands.c:3094
Project: GNU Networking Utilities
Submitted by: aidai
Submitted on: Thu 23 Dec 2021 02:13:56
