PT-2022-26031 · Unknown+2 · Rxvt-Unicode+2

David Leadbeater · Published 2022-10-10 · Updated 2024-06-15 · CVE-2022-4170

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions rxvt-unicode versions 9.25 through 9.26

Description The issue allows for remote code execution in the Perl background extension of the rxvt-unicode package. This occurs when an attacker can control the data written to the user's terminal and certain options are set.

Recommendations For rxvt-unicode versions 9.25 and 9.26, consider disabling the Perl background extension as a temporary workaround until a patch is available. Restrict access to the terminal to minimize the risk of exploitation. Avoid using options that allow an attacker to control the data written to the user's terminal in the affected versions.

Fix

RCE

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

ALT-PU-2022-2749

CVE-2022-4170

MGASA-2022-0459

OPENSUSE-SU-2023:0306-1

OPENSUSE-SU-2024:13323-1

Affected Products

Alt Linux

Debian

Rxvt-Unicode

References · 20

• https://nvd.nist.gov/vuln/detail/CVE-2022-4170 · Security Note
• https://security.gentoo.org/glsa/202310-20 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-4170 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-4170 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-4170 · Security Note
• https://ubuntu.com/security/CVE-2022-4170 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13323-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0459.html · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2023:0306-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-4170 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-4170 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0459 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2151597 · Note
• https://bugs.mageia.org/show_bug.cgi?id=31226 · Note
• https://openwall.com/lists/oss-security/2022/12/05/1 · Note