rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline.

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10222-1 advisory.

  - rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow     local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-     aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a     command on the wrong machine. (CVE-2008-1142)

  - rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution     because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline.
    (CVE-2021-33477)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202209-07 (Mrxvt: Arbitrary Code Execution)

  - rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution     because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline.
    (CVE-2021-33477)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202105-17 (rxvt-unicode: User-assisted execution of arbitrary code)

    It was discovered that rxvt-unicode did not properly handle certain       escape sequences.
  Impact :

    A remote attacker could entice a user to run a program where attacker       controls the output inside a rxvt terminal window, possibly resulting in       execution of arbitrary code with the privileges of the process or a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

eterm, an enlightened terminal emulator, allowed (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q).

For Debian 9 stretch, this problem has been fixed in version 0.9.6-5+deb9u1.

We recommend that you upgrade your eterm packages.

For the detailed security status of eterm please refer to its security tracker page at: https://security-tracker.debian.org/tracker/eterm

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

mrxvt, lightweight multi-tabbed X terminal emulator, allowed (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q).

For Debian 9 stretch, this problem has been fixed in version 0.5.4-2+deb9u1.

We recommend that you upgrade your mrxvt packages.

For the detailed security status of mrxvt please refer to its security tracker page at: https://security-tracker.debian.org/tracker/mrxvt

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

rxvt, VT102 terminal emulator for the X Window System, allowed (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q).

For Debian 9 stretch, this problem has been fixed in version 1:2.7.10-7+deb9u2.

We recommend that you upgrade your rxvt packages.

For the detailed security status of rxvt please refer to its security tracker page at: https://security-tracker.debian.org/tracker/rxvt

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

rxvt-unicode allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline.

For Debian 9 stretch, this problem has been fixed in version 9.22-1+deb9u1.

We recommend that you upgrade your rxvt-unicode packages.

For the detailed security status of rxvt-unicode please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/rxvt-unicode

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
168336	openSUSE 15 Security Update : rxvt-unicode (openSUSE-SU-2022:10222-1)	Nessus	SuSE Local Security Checks	high
165445	GLSA-202209-07 : Mrxvt: Arbitrary Code Execution	Nessus	Gentoo Local Security Checks	high
156996	GLSA-202105-17 : rxvt-unicode: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	high
150467	Debian DLA-2681-1 : eterm security update	Nessus	Debian Local Security Checks	high
150454	Debian DLA-2682-1 : mrxvt security update	Nessus	Debian Local Security Checks	high
150453	Debian DLA-2683-1 : rxvt security update	Nessus	Debian Local Security Checks	high
150099	Debian DLA-2671-1 : rxvt-unicode security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2021-33477

high

Tenable Plugins

high

high

high

high

high

high

high