PT-2021-4284 · Eterm +4 · Eterm +4

🗓️ 17 May 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Improper handling of ESC G Q escape sequences in rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 can allow code execution, data leakage, integrity loss, or denial of service.

Reporter	Title	Published	Views	Family All 97
AlpineLinux	CVE-2021-33477	20 May 202119:16	–	alpinelinux
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Eterm, Mrxyt, Rxyt-unicode software lies in their SSL-Proxy function, which allows attackers to access confidential data, compromise its integrity, and cause service failures.	5 Oct 202100:00	–	bdu_fstec
CNNVD	rxvt-unicode 安全漏洞	20 May 202100:00	–	cnnvd
CNVD	Rxvt Denial of Service Vulnerability	3 May 201700:00	–	cnvd
CNVD	Unspecified vulnerability in rxvt-unicode	24 May 202100:00	–	cnvd
CVE	CVE-2008-1142	7 Apr 200817:00	–	cve
CVE	CVE-2017-7483	2 May 201714:00	–	cve
CVE	CVE-2021-33477	20 May 202119:16	–	cve
Cvelist	CVE-2008-1142	7 Apr 200817:00	–	cvelist

Source	Link
openwall	www.openwall.com/lists/oss-security/2021/05/17/1
packetstormsecurity	www.packetstormsecurity.com/files/162621/rxvt-2.7.0-rxvt-unicode-9.22-Code-Execution.html
security-tracker	www.security-tracker.debian.org/tracker/DLA-2671-1
lists	www.lists.fedoraproject.org/archives/list/[email protected]/thread/6RFMU5YXXNYYVA7G2DAHRXXHO6JKVFUT
osv	www.osv.dev/vulnerability/openSUSE-SU-2022:10222-1
security	www.security.gentoo.org/glsa/202105-17
bdu	www.bdu.fstec.ru/vul/2021-04892
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
debian	www.debian.org/lts/security/2021/dla-2682
osv	www.osv.dev/vulnerability/DLA-2681-1

28 Jan 2025 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.18.8

CVSS 26.5

EPSS0.04012