CVE-2016-7115

Buffer overflow in the handle_packet function in mactelnet.c in the client in MAC-Telnet 0.4.3...

9.8 CriticalFix available

CVE-2016-7115 is a critical vulnerability (CVSS 9.8) in Mac-telnet Project Mac-telnet, published August 30, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.57%, the 91st percentile. Fixed in mactelnet 0.4.4-4.

Buffer overflow in the handle_packet function in mactelnet.c in the client in MAC-Telnet 0.4.3 and earlier allows remote TELNET servers to execute arbitrary code via a long string in an MT_CPTYPE_PASSSALT control packet.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

4.57%Up 2.0 points since Feb 4, 2022

What each source reports

NVD Score used 9.8

Record: CVE-2016-7115
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2016-7115
Updated: 2026-11-02

EUVDEUVD-2016-7994 No score

Record: EUVD-2016-7994
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5cjp-q827-394v 9.8

Buffer overflow in the handle_packet function in mactelnet.c in the client in MAC-Telnet 0.4.3...

Record: GHSA-5cjp-q827-394v
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-119
Updated: 2026-11-02

OSV 9.8

Record: CVE-2016-7115
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2016-7115 9.8

Record: DEBIAN-CVE-2016-7115
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2016-7115 9.8

Record: UBUNTU-CVE-2016-7115
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Affected products

mac-telnet project mac-telnet

Affected packages

Affected packages
Package	Affected	Fixed
`mactelnet` Debian:12	before 0.4.4-4	0.4.4-4
`mactelnet` Debian:13	before 0.4.4-4	0.4.4-4
`mactelnet` Debian:14	before 0.4.4-4	0.4.4-4
`mactelnet` Debian:7	before 0.3.4-1+deb7u1, plus listed versions 0.3.4-1	0.3.4-1+deb7u1
`mactelnet` Ubuntu:14.04:LTS	before 0.4.0-1+deb8u1build0.14.04.1, plus listed versions 0.4.0-1	0.4.0-1+deb8u1build0.14.04.1
`mactelnet` Ubuntu:16.04:LTS	All versions, plus listed versions 0.4.0-10.4.1-20.4.2-1	None known

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV