CLEANSTART-2024-YE53546
Dashboard / Vulnerabilities / CLEANSTART-2024-YE53546
Summary: rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set
Details: Security vulnerability affects the rxvt-unicode package. The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set.
References: https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-YE53546.json, https://osv.dev/vulnerability/CVE-2022-4170, https://nvd.nist.gov/vuln/detail/CVE-2022-4170
Affected packages
Package
Name: rxvt-unicode
Purl: pkg:apk/cleanstart/rxvt-unicode
Affected ranges
Type: ECOSYSTEM
Events:
