PT-2023-7565 · Iterm2 · Iterm2

Solid-Snail · Published 2023-10-21 · Updated 2023-10-31 · CVE-2023-46300

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iTerm2 versions prior to 3.4.20

Description The issue is related to the mishandling of certain escape sequences in iTerm2, specifically those related to tmux integration. This can potentially allow a remote attacker to execute arbitrary code due to the lack of proper output encoding or escaping.

Recommendations For versions prior to 3.4.20, update to version 3.4.20 or later to resolve the issue. As a temporary workaround, consider disabling tmux integration until a patch is available. Restrict access to potentially vulnerable escape sequences to minimize the risk of exploitation.

Exploit

Fix

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-116

Related Identifiers

BDU:2023-08621

CVE-2023-46300

Affected Products

Iterm2

References · 17

• 🔥 https://blog.solidsnail.com/posts/2023-08-28-iterm2-rce · Exploit
• https://github.com/gnachman/iTerm2/commit/ae8192522661c34d1cbe57f6f9ef2ff0a337c2a5 · Patch
• https://github.com/gnachman/iTerm2/commit/b2268b03b5f3d4cd8ca275eaef5d16d0fac20009 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-46300 · Security Note
• https://bdu.fstec.ru/vul/2023-08621 · Security Note
• https://osv.dev/vulnerability/CVE-2023-46300 · Vendor Advisory
• https://iterm2.com/news.html · Note
• https://twitter.com/VulmonFeeds/status/1715964734598443212 · Twitter Post
• https://twitter.com/CVEnew/status/1715939297344594385 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1716294141574029471 · Twitter Post
• https://vuldb.com/?id.243129 · Note
• https://twitter.com/fletch_ai/status/1716652482971988259 · Twitter Post
• https://twitter.com/fridaysecurity/status/1716295429455835512 · Twitter Post
• https://t.me/cibsecurity/72741 · Telegram Post
• https://t.me/pentestingnews/40371 · Telegram Post