CVE-2017-7483

High

Published: 02/05/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Rxvt version 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, leading to a segmentation fault.

Risk Assessment

An attacker can exploit this vulnerability to cause service disruption, potentially leading to system downtime.

Recommendation

It is recommended to upgrade to a newer version of Rxvt to mitigate this vulnerability.

Other vulnerabilities in Rxvt 2.7.10

CVE-1999-1186High
A vulnerability in rxvt, when compiled with the PRINT_PIPE option, allows local users to gain root privileges by specifying a malicious program using the -print-pipe command line parameter.

Original NVD description (English source)

Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read.