PatchTheCVErxvt vulnerabilities
Recent CVEs affecting rxvt products. 6 tracked.
rxvt has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2008-04-07. Highest priority: CVE-2003-0066 (score 47/100).
- CVE-2008-1142 LOW 3.7 UPGRADE UPGRADE rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow loc
- CVE-2003-0066 HIGH 7.5 DOWNGRADE The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain charact
- CVE-2003-0023 MEDIUM 5.0 DOWNGRADE The menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary commands via a
- CVE-2003-0022 MEDIUM 5.0 DOWNGRADE The "screen dump" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character
- CVE-2001-1077 MEDIUM 4.6 DOWNGRADE Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or
- CVE-2000-0476 MEDIUM 5.0 DOWNGRADE DOWNGRADE xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters w
FAQ
How do I fix rxvt vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rxvt being exploited right now?
None of the tracked rxvt CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rxvt CVE should I patch first?
CVE-2003-0066 currently ranks highest (47/100): The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain charact.