PT-2023-7566 · Iterm2 · Iterm2

Solid-Snail · Published 2023-10-21 · Updated 2023-10-31 · CVE-2023-46301

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iTerm2 versions prior to 3.4.20

Description The issue is related to the mishandling of certain escape sequences related to upload, which can allow potentially remote code execution. This is due to a lack of proper output encoding or escaping mechanism in the terminal emulator. An attacker could exploit this issue to execute arbitrary code.

Recommendations For versions prior to 3.4.20, update to version 3.4.20 or later to resolve the issue. As a temporary workaround, consider disabling the handling of escape sequences related to upload until a patch is available. Restrict access to potentially vulnerable features to minimize the risk of exploitation.

Exploit

Fix

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-116

Related Identifiers

BDU:2023-08622

CVE-2023-46301

Affected Products

Iterm2

References · 16

• 🔥 https://blog.solidsnail.com/posts/2023-08-28-iterm2-rce · Exploit
• https://github.com/gnachman/iTerm2/commit/b2268b03b5f3d4cd8ca275eaef5d16d0fac20009 · Patch
• https://github.com/gnachman/iTerm2/commit/85cbf5ebda472c9ec295887e99c2b6f1b5867f1b · Patch
• https://bdu.fstec.ru/vul/2023-08622 · Security Note
• https://osv.dev/vulnerability/CVE-2023-46301 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46301 · Security Note
• https://t.me/cibsecurity/72740 · Telegram Post
• https://t.me/cvenotify/59908 · Telegram Post
• https://iterm2.com/news.html · Note
• https://twitter.com/the_yellow_fall/status/1716294141574029471 · Twitter Post
• https://twitter.com/fletch_ai/status/1716652482971988259 · Twitter Post
• https://twitter.com/CVEnew/status/1715939298615480323 · Twitter Post
• https://twitter.com/fridaysecurity/status/1716295429455835512 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1715964987754049616 · Twitter Post
• https://t.me/pentestingnews/40371 · Telegram Post