CVE-2017-7483 Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to a...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rxvt project rxvt | All versions | No fix listed |
| debian linux | = 9.0 | No fix listed |
| The RXVT Project rxvt | = 2.7.10 | No fix listed |
References
- [oss-security] 20170501 Integer Overflow in rxvt exploit mailing-list patch third-party-advisory
- [oss-security] 20170501 Re: Integer Overflow in rxvt mailing-list third-party-advisory
- [debian-lts-announce] 20210609 [SECURITY] [DLA 2683-1] rxvt security update mailing-list third-party-advisory