Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
No data.
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-2671-1 | rxvt-unicode security update |
Debian DLA |
DLA-2681-1 | eterm security update |
Debian DLA |
DLA-2682-1 | mrxvt security update |
Debian DLA |
DLA-2683-1 | rxvt security update |
EUVD |
EUVD-2021-20180 | rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline. |
Ubuntu USN |
USN-8991-1 | rxvt-unicode vulnerability |
No CVSS v4.0
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 4.1% (4.089% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.