Description
rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-2671-1 | rxvt-unicode security update |
Debian DLA |
DLA-2681-1 | eterm security update |
Debian DLA |
DLA-2682-1 | mrxvt security update |
Debian DLA |
DLA-2683-1 | rxvt security update |
EUVD |
EUVD-2021-20180 | rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline. |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-03T23:50:42.963Z
Reserved: 2021-05-20T00:00:00.000Z
Link: CVE-2021-33477
No data.
Status : Modified
Published: 2021-05-20T20:15:07.397
Modified: 2024-11-21T06:08:54.250
Link: CVE-2021-33477
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DLA
EUVD