What’s Vulnerable › Vulnerabilities

CVE-2017-7483

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-05-02 · updated 2026-06-17
• Weakness: CWE-125

Description

Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read.

Affected products

• Debian Linux: 9.0
• Rxvt Project Rxvt: all versions

References

• http://www.openwall.com/lists/oss-security/2017/05/01/15
• http://www.openwall.com/lists/oss-security/2017/05/01/18
• https://lists.debian.org/debian-lts-announce/2021/06/msg00012.html
• http://www.openwall.com/lists/oss-security/2017/05/01/15
• http://www.openwall.com/lists/oss-security/2017/05/01/18
• https://lists.debian.org/debian-lts-announce/2021/06/msg00012.html

Get alerted when CVE-2017-7483 or the next vulnerability affects your stack