CVE-2021-33477

The CVE-2021-33477 entry affects rxvt-unicode (9.22), rxvt (2.7.10), mrxvt (0.5.4) and Eterm (0.9.7). Root cause: improper handling of certain escape sequences (ESC G Q) that can terminate a response with a newline, enabling potentially remote code execution. Public advisories confirm this across...

CVE-2021-33477

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is terminated by a newline...

CVE-2021-33477

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is terminated by a newline...

rxvt-unicode 安全漏洞

rxvt-unicode is an application. A customizable terminal branching from rxvt. A security vulnerability exists in rxvt-unicode 9.22 that allows code execution because certain escape sequences ESC G Q are mishandled. The response is terminated by a line feed. No detailed vulnerability details are...

rxvt 2.7.0 / rxvt-unicode 9.22 Code Execution Exploit

rxvt version 2.7.0 and rxvt-unicode version 9.22 incorrectly handles ANSI escape sequences allowing for arbitrary code execution. !/usr/bin/env python Title: rxvt remote code execution over scp with $SHELL=/bin/bash 0day Version: rxvt 2.7.10, rxvt-unicode 9.22 Author: def Date: 2021-05-16 CVE: N/...

rxvt 2.7.0 / rxvt-unicode 9.22 Code Execution

!/usr/bin/env python Title: rxvt remote code execution over scp with $SHELL=/bin/bash 0day Version: rxvt 2.7.10, rxvt-unicode 9.22 Author: def Date: 2021-05-16 CVE: N/A ------------------------------------------------------------------------------ URXVT VULNERABILITY In rxvt-based terminals, ANSI...

PT-2021-4284 · Eterm +4 · Eterm +4

Name of the Vulnerable Software and Affected Versions: rxvt-unicode version 9.22 rxvt version 2.7.10 mrxvt version 0.5.4 Eterm version 0.9.7 Description: The issue is related to improper handling of certain escape sequences, specifically ESC G Q, which can lead to code execution. This could...

Updated rxvt-unicode packages fix security vulnerability

The rxvt-unicode package has been patched to harden it against potential integer overflow issues when printing escape sequences...

MGASA-2017-0193 Updated rxvt-unicode packages fix security vulnerability

The rxvt-unicode package has been patched to harden it against potential integer overflow issues when printing escape sequences...

openSUSE Security Update : rxvt-unicode (openSUSE-2017-670)

This update for rxvt-unicode fixes the following issue : While urxvt is not directly affected by CVE-2017-7483 we have added a patch to harden urxvt to avoid similar bugs in the future. boo1036456 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Rxvt Denial of Service Vulnerability

RXVT is a terminal emulator for the X Window System. A denial of service vulnerability exists in Rxvt 2.7.10, which can be exploited by remote attackers to exceed read limits...

CVE-2017-7483

Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read...

CVE-2017-7483

Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read...

UBUNTU-CVE-2017-7483

Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read...

Out-of-bounds

Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read...

CVE-2017-7483

Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read...

CVE-2017-7483

Rxvt 2.7.10 is vulnerable to denial-of-service via a crafted terminal escape code (-2^31), causing a non-invertible integer and an out-of-bounds read that leads to a segfault. Affected product: rxvt (VT102 terminal emulator for X). Root cause: improper handling of certain escape sequences. Impact...

CVE-2017-7483

Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read...

CVE-2017-7483

Removed by vendor...

[slackware-security] rxvt

New rxvt packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/rxvt-2.7.10-i586-5slack14.2.txz: Rebuilt. Patched an integer overflow that can crash rxvt with an escap...