Vulnerabilities (CVE)

Filtered by vendor Rxvt Project Subscribe
Filtered by product Rxvt
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-33477 6 Debian, Eterm Project, Fedoraproject and 3 more 6 Debian Linux, Eterm, Fedora and 3 more 2023-12-10 6.5 MEDIUM 8.8 HIGH
rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline.
CVE-2017-7483 2 Debian, Rxvt Project 2 Debian Linux, Rxvt 2023-12-10 5.0 MEDIUM 7.5 HIGH
Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read.