Lucene search
+L

216 matches found

OSV
OSV
added 2022/12/09 6:15 p.m.12 views

UBUNTU-CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS7.5AI score0.02058EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2022/12/09 12:0 a.m.55 views

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS9.6AI score0.02058EPSS
SaveExploits0
Cvelist
Cvelist
added 2022/12/09 12:0 a.m.22 views

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.7AI score0.02058EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/09 12:0 a.m.23 views

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS9.6AI score0.02058EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/12/09 12:0 a.m.5 views

rxvt-unicode 安全漏洞

rxvt-unicode is an application. A customizable terminal that branches from rxvt. A security vulnerability exists in rxvt-unicode. An attacker can exploit this vulnerability to remotely execute code...

9.8CVSS8.4AI score0.02058EPSS
SaveExploits0References4
CVE
CVE
added 2022/12/09 12:0 a.m.115 views

CVE-2022-4170

The CVE-2022-4170 issue affects the rxvt-unicode terminal emulator, specifically the Perl background extension. The vulnerability allows remote code execution when an attacker can control data written to the user’s terminal and certain X resources/options are set. Multiple advisories (Gentoo GLSA...

9.8CVSS9.3AI score0.02058EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/09 12:0 a.m.4 views

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.6AI score0.02058EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2022/12/09 12:0 a.m.60 views

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS9.6AI score0.02058EPSS
SaveExploits0
FreeBSD
FreeBSD
added 2022/12/05 12:0 a.m.20 views

rxvt-unicode is vulnerable to a remote code execution

Marc Lehmann reports: The biggest issue is resolving CVE-2022-4170, which allows command execution inside urxvt from within the terminal that means anything that can output text in the terminal can start commands in the context of the urxvt process, even remotely...

9.8CVSS3.3AI score0.02058EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/12/02 12:0 a.m.28 views

openSUSE 15 Security Update : rxvt-unicode (openSUSE-SU-2022:10222-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10222-1 advisory. - rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11...

8.8CVSS8AI score0.04089EPSS
SaveExploits2References6
OSV
OSV
added 2022/11/30 8:19 a.m.6 views

OPENSUSE-SU-2022:10222-1 Security update for rxvt-unicode

This update for rxvt-unicode fixes the following issues: Update to 9.26 - eviouring.c was wrongly required during compilation, and wrongly not packaged. Update to 9.25 boo1186174 CVE-2021-33477 - for the 17.5th anniversary, and because many distributions seem to remove rxvt in favour of urxvt, th...

8.8CVSS8.6AI score0.04089EPSS
SaveExploits2References4
OPENSUSE Linux
OPENSUSE Linux
added 2022/11/30 12:0 a.m.3 views

Security update for rxvt-unicode (important)

openSUSE Security Update: Security update for rxvt-unicode Announcement ID: openSUSE-SU-2022:10222-1 Rating: important References: 1186174 Cross-References: CVE-2008-1142 CVE-2021-33477 CVSS scores: CVE-2021-33477 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE...

8.8CVSS7.5AI score0.04089EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2022/04/21 12:0 a.m.10 views

Slackware: Security Advisory (SSA:2017-121-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.02135EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.10 views

Mageia: Security Advisory (MGASA-2017-0193)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.13 views

Mageia: Security Advisory (MGASA-2021-0358)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.04089EPSS
SaveExploits1References9
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.20 views

Mageia: Security Advisory (MGASA-2014-0202)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.6CVSS6.6AI score0.041EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/01/24 12:0 a.m.28 views

GLSA-202105-17 : rxvt-unicode: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202105-17 rxvt-unicode: User-assisted execution of arbitrary code It was discovered that rxvt-unicode did not properly handle certain escape sequences. Impact : A remote attacker could entice a user to run a program where attacker...

8.8CVSS8.4AI score0.04089EPSS
SaveExploits1References2
Fedora
Fedora
added 2021/08/02 1:7 a.m.30 views

[SECURITY] Fedora 33 Update: mrxvt-0.5.3-31.fc33

Mrxvt previously materm is based on 2.7.11 CVS of rxvt and aterm...

8.8CVSS1.9AI score0.04089EPSS
SaveExploits1
Veracode
Veracode
added 2021/06/12 8:49 p.m.24 views

Denial Of Service (DoS)

Rxvt is vulnerable to denial of service. An attacker is able to crash the application by passing the value -2^31 inside a terminal escape code which would result in a non-invertible integer that eventually leads to a segfault due to an out of bounds read...

7.5CVSS3.1AI score0.02135EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2021/06/10 12:0 a.m.22 views

Debian: Security Advisory (DLA-2683-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.2AI score0.04089EPSS
SaveExploits2References4
Rows per page
Query Builder