Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Telnet | — | Apply OS X security update 2005-003 | Dec 16, 2011 | May 2, 2005 |
| Debian | — | Upgrade heimdalUpgrade netkit-telnet-sslUpgrade krb5Upgrade netkit-telnet | Jul 30, 2024 | May 2, 2005 |
| Freebsd | — | Upgrade heimdal | Dec 10, 2025 | Mar 20, 2006 |
| Gentoo Linux | — | Upgrade app-crypt/heimdal.Upgrade net-misc/netkit-telnetd.Upgrade net-misc/telnet-bsd.Upgrade app-crypt/mit-krb5. | Oct 30, 2017 | May 2, 2005 |
| Suse | — | Upgrade telnetUpgrade heimdal-devel-64bitUpgrade heimdal-libUpgrade heimdal-develUpgrade heimdal-devel-32bitUpgrade heimdal-lib-x86Upgrade heimdal-lib-32bitUpgrade heimdalUpgrade heimdal-lib-64bit | Feb 17, 2015 | May 2, 2005 |
| Ubuntu | — | Upgrade krb5-rsh-serverUpgrade krb5-clientsUpgrade telnetd | Nov 8, 2024 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub