PatchTheCVErxvt-unicode vulnerabilities and fixes
Recent CVEs affecting rxvt-unicode, with upgrade or downgrade steps. 2 tracked.
Also searched as: rxvt unicode.
rxvt-unicode has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-12-09. Highest priority: CVE-2022-4170 (score 65/100).
- CVE-2022-4170 CRITICAL 9.8 DOWNGRADE DOWNGRADE The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an a
- CVE-2021-33477 HIGH 8.8 DOWNGRADE DOWNGRADE rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because
FAQ
How do I fix rxvt-unicode vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rxvt-unicode being exploited right now?
None of the tracked rxvt-unicode CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rxvt-unicode CVE should I patch first?
CVE-2022-4170 currently ranks highest (65/100): The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an a.