ID CVE-2017-7467
Summary A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious terminal device could potentially use this flaw to crash minicom, or execute arbitrary code in the context of the minicom process.
References
Vulnerable Configurations
CVSS
Base: None
Impact:
Exploitability:
nessus via4
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DLA-914.NASL
    description CVE-2017-7467 Out of bounds write in vt100.c For Debian 7 'Wheezy', these problems have been fixed in version 2.6.1-1+deb7u1. We recommend that you upgrade your minicom packages. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2017-10-29
    modified 2017-08-14
    plugin id 99639
    published 2017-04-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=99639
    title Debian DLA-914-1 : minicom security update
  • NASL family SuSE Local Security Checks
    NASL id OPENSUSE-2017-947.NASL
    description This update for minicom fixes the following issue : This security issue was fixed : - CVE-2017-7467: Invalid cursor coordinates and scroll regions could lead to code execution (bsc#1033783). This update was imported from the SUSE:SLE-12:Update update project.
    last seen 2017-10-29
    modified 2017-08-18
    plugin id 102563
    published 2017-08-18
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=102563
    title openSUSE Security Update : minicom (openSUSE-2017-947)
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-201706-13.NASL
    description The remote host is affected by the vulnerability described in GLSA-201706-13 (minicom: Remote execution of arbitrary code) In minicom before version 2.7.1, the escparms[] buffer in vt100.c is vulnerable to an overflow. Impact : A remote attacker, able to connect to a minicom port, could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition. Workaround : There is no known workaround at this time.
    last seen 2017-10-29
    modified 2017-06-07
    plugin id 100656
    published 2017-06-07
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=100656
    title GLSA-201706-13 : minicom: Remote execution of arbitrary code
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2017-1092-1.NASL
    description This update for minicom fixes the following issue: This security issue was fixed : - CVE-2017-7467: Invalid cursor coordinates and scroll regions could lead to code execution (bsc#1033783). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2017-10-29
    modified 2017-08-16
    plugin id 99623
    published 2017-04-24
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=99623
    title SUSE SLED12 / SLES12 Security Update : minicom (SUSE-SU-2017:1092-1)
  • NASL family Slackware Local Security Checks
    NASL id SLACKWARE_SSA_2017-108-01.NASL
    description New minicom packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.
    last seen 2017-10-29
    modified 2017-09-21
    plugin id 99441
    published 2017-04-19
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=99441
    title Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : minicom (SSA:2017-108-01)
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2017-1136-1.NASL
    description This update for minicom fixes the following issues : - CVE-2017-7467: Invalid cursor coordinates and scroll regions could lead to code execution (bsc#1033783) Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2017-10-29
    modified 2017-08-16
    plugin id 99759
    published 2017-05-01
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=99759
    title SUSE SLES11 Security Update : minicom (SUSE-SU-2017:1136-1)
Last major update 11-07-2018 - 09:29
Published 11-07-2018 - 09:29
Last modified 12-07-2018 - 21:29
Back to Top