Vulnerability Details CVE-2017-7467
A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious terminal device could potentially use this flaw to crash minicom, or execute arbitrary code in the context of the minicom process.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 79.3%
CVSS Severity
CVSS v3 Score 7.0
CVSS v2 Score 7.5
References
- http://www.openwall.com/lists/oss-security/2017/04/18/5
- http://www.securityfocus.com/bid/97966
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7467
- https://security.gentoo.org/glsa/201706-13
- http://www.openwall.com/lists/oss-security/2017/04/18/5
- http://www.securityfocus.com/bid/97966
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7467
- https://security.gentoo.org/glsa/201706-13
Products affected by CVE-2017-7467
-
cpe:2.3:a:minicom_project:minicom:*