The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set.

The remote host is affected by the vulnerability described in GLSA-202310-20 (rxvt-unicode: Arbitrary Code Execution)

  - The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when     an attacker can control the data written to the user's terminal and certain options are set.
    (CVE-2022-4170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0306-1 advisory.

  - The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when     an attacker can control the data written to the user's terminal and certain options are set.
    (CVE-2022-4170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5b2eac07-8b4d-11ed-8b23-a0f3c100ae18 advisory.

  - The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when     an attacker can control the data written to the user's terminal and certain options are set.
    (CVE-2022-4170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of rxvt-unicode installed on the remote host is prior to 9.26. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-003-02 advisory.

  - The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when     an attacker can control the data written to the user's terminal and certain options are set.
    (CVE-2022-4170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
184010	GLSA-202310-20 : rxvt-unicode: Arbitrary Code Execution	Nessus	Gentoo Local Security Checks	critical
183658	openSUSE 15 Security Update : rxvt-unicode (openSUSE-SU-2023:0306-1)	Nessus	SuSE Local Security Checks	critical
169700	FreeBSD : rxvt-unicode is vulnerable to a remote code execution (5b2eac07-8b4d-11ed-8b23-a0f3c100ae18)	Nessus	FreeBSD Local Security Checks	critical
169479	Slackware Linux 15.0 / current rxvt-unicode Vulnerability (SSA:2023-003-02)	Nessus	Slackware Local Security Checks	critical

Detections

Analytics

CVE-2022-4170

critical

Tenable Plugins

critical

critical

critical

critical