{
  "cveId": "CVE-2019-0053",
  "url": "https://patchblox.com/security/cve/CVE-2019-0053",
  "summary": "CVE-2019-0053 is fixed in 11 products on 1 platform, first by inetutils-ftp 2:1.9.4-3ubuntu0.1\u002Besm2, released August 13, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "inetutils-ftp: Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based bu...",
  "description": "Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via the telnet client to remote telnet servers. This issue only affects the telnet client \u2014 accessible from the CLI or shell \u2014 in Junos OS. Inbound telnet services are not affected by this issue. This issue affects: Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D80; 14.1X53 versions prior to 14.1X53-D130, 14.1X53-D49; 15.1 versions prior to 15.1F6-S12, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D170; 15.1X53 versions prior to 15.1X53-D237, 15.1X53-D496, 15.1X53-D591, 15.1X53-D69; 16.1 versions prior to 16.1R3-S11, 16.1R7-S4; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R2-S7, 17.2R3-S1; 17.3 versions prior to 17.3R3-S4; 17.4 versions prior to 17.4R1-S6, 17.4R2-S3, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S3; 18.2 versions prior to 18.2R1-S5, 18.2R2-S2, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2.",
  "published": "2019-07-11T13:15:00Z",
  "severity": "Medium",
  "epss": 0.00587,
  "epssPercentile": 0.48293,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "inetutils-ftp",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.9.4-3ubuntu0.1\u002Besm2",
      "fix": "inetutils-ftp 2:1.9.4-3ubuntu0.1\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-inetutils-ftp-2-1.9.4-3ubuntu0.1-esm2",
      "released": "2023-08-13T22:15:00Z"
    },
    {
      "platform": "linux",
      "product": "inetutils-ftpd",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.9.4-3ubuntu0.1\u002Besm2",
      "fix": "inetutils-ftpd 2:1.9.4-3ubuntu0.1\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-inetutils-ftpd-2-1.9.4-3ubuntu0.1-esm2",
      "released": "2023-08-13T22:15:00Z"
    },
    {
      "platform": "linux",
      "product": "inetutils-inetd",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.9.4-3ubuntu0.1\u002Besm2",
      "fix": "inetutils-inetd 2:1.9.4-3ubuntu0.1\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-inetutils-inetd-2-1.9.4-3ubuntu0.1-esm2",
      "released": "2023-08-13T22:15:00Z"
    },
    {
      "platform": "linux",
      "product": "inetutils-ping",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.9.4-3ubuntu0.1\u002Besm2",
      "fix": "inetutils-ping 2:1.9.4-3ubuntu0.1\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-inetutils-ping-2-1.9.4-3ubuntu0.1-esm2",
      "released": "2023-08-13T22:15:00Z"
    },
    {
      "platform": "linux",
      "product": "inetutils-syslogd",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.9.4-3ubuntu0.1\u002Besm2",
      "fix": "inetutils-syslogd 2:1.9.4-3ubuntu0.1\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-inetutils-syslogd-2-1.9.4-3ubuntu0.1-esm2",
      "released": "2023-08-13T22:15:00Z"
    },
    {
      "platform": "linux",
      "product": "inetutils-talk",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.9.4-3ubuntu0.1\u002Besm2",
      "fix": "inetutils-talk 2:1.9.4-3ubuntu0.1\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-inetutils-talk-2-1.9.4-3ubuntu0.1-esm2",
      "released": "2023-08-13T22:15:00Z"
    },
    {
      "platform": "linux",
      "product": "inetutils-talkd",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.9.4-3ubuntu0.1\u002Besm2",
      "fix": "inetutils-talkd 2:1.9.4-3ubuntu0.1\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-inetutils-talkd-2-1.9.4-3ubuntu0.1-esm2",
      "released": "2023-08-13T22:15:00Z"
    },
    {
      "platform": "linux",
      "product": "inetutils-telnet",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.9.4-3ubuntu0.1\u002Besm2",
      "fix": "inetutils-telnet 2:1.9.4-3ubuntu0.1\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-inetutils-telnet-2-1.9.4-3ubuntu0.1-esm2",
      "released": "2023-08-13T22:15:00Z"
    },
    {
      "platform": "linux",
      "product": "inetutils-telnetd",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.9.4-3ubuntu0.1\u002Besm2",
      "fix": "inetutils-telnetd 2:1.9.4-3ubuntu0.1\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-inetutils-telnetd-2-1.9.4-3ubuntu0.1-esm2",
      "released": "2023-08-13T22:15:00Z"
    },
    {
      "platform": "linux",
      "product": "inetutils-tools",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.9.4-3ubuntu0.1\u002Besm2",
      "fix": "inetutils-tools 2:1.9.4-3ubuntu0.1\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-inetutils-tools-2-1.9.4-3ubuntu0.1-esm2",
      "released": "2023-08-13T22:15:00Z"
    },
    {
      "platform": "linux",
      "product": "inetutils-traceroute",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:1.9.4-3ubuntu0.1\u002Besm2",
      "fix": "inetutils-traceroute 2:1.9.4-3ubuntu0.1\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-inetutils-traceroute-2-1.9.4-3ubuntu0.1-esm2",
      "released": "2023-08-13T22:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}