CVE Vulnerabilities

CVE-2022-4170

Published: Dec 09, 2022 | Modified: Nov 14, 2023
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the users terminal and certain options are set.

Affected Software

Name Vendor Start Version End Version
Rxvt-unicode Rxvt-unicode_project 9.25 (including) 9.25 (including)
Rxvt-unicode Rxvt-unicode_project 9.26 (including) 9.26 (including)

References