Summary
It was discovered that rxvt-unicode incorrectly handled certain escape
sequences. An attacker could possibly use this issue to execute arbitrary
code if a user displayed specially crafted text in the terminal.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | rxvt-unicode | 9.21-1ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | rxvt-unicode | 9.22-3ubuntu0.1~esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | rxvt-unicode | 9.22-6ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of impro…
References
-
report
https://ubuntu.com/security/CVE-2021-33477