# CVE-2019-0053: inetutils-ftp: Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based bu...

CVE-2019-0053 is fixed in 11 products on 1 platform, first by inetutils-ftp 2:1.9.4-3ubuntu0.1+esm2, released August 13, 2023. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2019-0053
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0059
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jul 11, 2019

## Description

Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via the telnet client to remote telnet servers. This issue only affects the telnet client — accessible from the CLI or shell — in Junos OS. Inbound telnet services are not affected by this issue. This issue affects: Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D80; 14.1X53 versions prior to 14.1X53-D130, 14.1X53-D49; 15.1 versions prior to 15.1F6-S12, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D170; 15.1X53 versions prior to 15.1X53-D237, 15.1X53-D496, 15.1X53-D591, 15.1X53-D69; 16.1 versions prior to 16.1R3-S11, 16.1R7-S4; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R2-S7, 17.2R3-S1; 17.3 versions prior to 17.3R3-S4; 17.4 versions prior to 17.4R1-S6, 17.4R2-S3, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S3; 18.2 versions prior to 18.2R1-S5, 18.2R2-S2, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | inetutils-ftp Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm2 | [inetutils-ftp 2:1.9.4-3ubuntu0.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-ftp-2-1.9.4-3ubuntu0.1-esm2.md) | Aug 13, 2023 |
| Linux | inetutils-ftpd Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm2 | [inetutils-ftpd 2:1.9.4-3ubuntu0.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-ftpd-2-1.9.4-3ubuntu0.1-esm2.md) | Aug 13, 2023 |
| Linux | inetutils-inetd Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm2 | [inetutils-inetd 2:1.9.4-3ubuntu0.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-inetd-2-1.9.4-3ubuntu0.1-esm2.md) | Aug 13, 2023 |
| Linux | inetutils-ping Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm2 | [inetutils-ping 2:1.9.4-3ubuntu0.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-ping-2-1.9.4-3ubuntu0.1-esm2.md) | Aug 13, 2023 |
| Linux | inetutils-syslogd Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm2 | [inetutils-syslogd 2:1.9.4-3ubuntu0.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-syslogd-2-1.9.4-3ubuntu0.1-esm2.md) | Aug 13, 2023 |
| Linux | inetutils-talk Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm2 | [inetutils-talk 2:1.9.4-3ubuntu0.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-talk-2-1.9.4-3ubuntu0.1-esm2.md) | Aug 13, 2023 |
| Linux | inetutils-talkd Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm2 | [inetutils-talkd 2:1.9.4-3ubuntu0.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-talkd-2-1.9.4-3ubuntu0.1-esm2.md) | Aug 13, 2023 |
| Linux | inetutils-telnet Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm2 | [inetutils-telnet 2:1.9.4-3ubuntu0.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-telnet-2-1.9.4-3ubuntu0.1-esm2.md) | Aug 13, 2023 |
| Linux | inetutils-telnetd Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm2 | [inetutils-telnetd 2:1.9.4-3ubuntu0.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-telnetd-2-1.9.4-3ubuntu0.1-esm2.md) | Aug 13, 2023 |
| Linux | inetutils-tools Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm2 | [inetutils-tools 2:1.9.4-3ubuntu0.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-tools-2-1.9.4-3ubuntu0.1-esm2.md) | Aug 13, 2023 |
| Linux | inetutils-traceroute Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm2 | [inetutils-traceroute 2:1.9.4-3ubuntu0.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-traceroute-2-1.9.4-3ubuntu0.1-esm2.md) | Aug 13, 2023 |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.