Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2017/05/01/15 | Exploit Mailing List Patch Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2017/05/01/18 | Mailing List Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2021/06/msg00012.html | Mailing List Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2017/05/01/15 | Exploit Mailing List Patch Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2017/05/01/18 | Mailing List Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2021/06/msg00012.html | Mailing List Third Party Advisory |
Configurations
History
21 Nov 2024, 03:31
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.openwall.com/lists/oss-security/2017/05/01/15 - Exploit, Mailing List, Patch, Third Party Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2017/05/01/18 - Mailing List, Third Party Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2021/06/msg00012.html - Mailing List, Third Party Advisory |
Information
Published : 2017-05-02 14:59
Updated : 2024-11-21 03:31
NVD link : CVE-2017-7483
Mitre link : CVE-2017-7483
CVE.ORG link : CVE-2017-7483
JSON object : View
Products Affected
rxvt_project
- rxvt
debian
- debian_linux
CWE
CWE-125
Out-of-bounds Read