rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-2671-1 | rxvt-unicode security update |
Debian DLA |
DLA-2681-1 | eterm security update |
Debian DLA |
DLA-2682-1 | mrxvt security update |
Debian DLA |
DLA-2683-1 | rxvt security update |
EUVD |
EUVD-2021-20180 | rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-03T23:50:42.963Z
Reserved: 2021-05-20T00:00:00
Link: CVE-2021-33477
No data.
Status : Modified
Published: 2021-05-20T20:15:07.397
Modified: 2024-11-21T06:08:54.250
Link: CVE-2021-33477
No data.
OpenCVE Enrichment
No data.
Debian DLA
EUVD