This update for minicom fixes the following issue: This security issue was fixed :

  - CVE-2017-7467: Invalid cursor coordinates and scroll     regions could lead to code execution (bsc#1033783).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the minicom package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A buffer overflow flaw was found in the way minicom     before version 2.7.1 handled VT100 escape sequences. A     malicious terminal device could potentially use this     flaw to crash minicom, or execute arbitrary code in the     context of the minicom process.(CVE-2017-7467)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New minicom packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.

This update for minicom fixes the following issue :

This security issue was fixed :

  - CVE-2017-7467: Invalid cursor coordinates and scroll     regions could lead to code execution (bsc#1033783).

This update was imported from the SUSE:SLE-12:Update update project.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - minicom: Out of bounds write in vt100.c (CVE-2017-7467)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - minicom: Out of bounds write in vt100.c (CVE-2017-7467)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201706-13 (minicom: Remote execution of arbitrary code)

    In minicom before version 2.7.1, the escparms[] buffer in vt100.c is       vulnerable to an overflow.
  Impact :

    A remote attacker, able to connect to a minicom port, could possibly       execute arbitrary code with the privileges of the process, or cause a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

CVE-2017-7467 Out of bounds write in vt100.c

For Debian 7 'Wheezy', these problems have been fixed in version 2.6.1-1+deb7u1.

We recommend that you upgrade your minicom packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for minicom fixes the following issues :

  - CVE-2017-7467: Invalid cursor coordinates and scroll     regions could lead to code execution (bsc#1033783)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - minicom: Out of bounds write in vt100.c (CVE-2017-7467)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
99623	SUSE SLED12 / SLES12 Security Update : minicom (SUSE-SU-2017:1092-1)	Nessus	SuSE Local Security Checks	4/24/2017	1/6/2021	critical
145174	EulerOS 2.0 SP3 : minicom (EulerOS-SA-2021-1097)	Nessus	Huawei Local Security Checks	1/20/2021	1/29/2024	critical
146186	EulerOS 2.0 SP5 : minicom (EulerOS-SA-2021-1214)	Nessus	Huawei Local Security Checks	2/4/2021	1/23/2024	critical
146645	EulerOS 2.0 SP2 : minicom (EulerOS-SA-2021-1329)	Nessus	Huawei Local Security Checks	2/22/2021	1/22/2024	critical
99441	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : minicom (SSA:2017-108-01)	Nessus	Slackware Local Security Checks	4/19/2017	1/14/2021	critical
102563	openSUSE Security Update : minicom (openSUSE-2017-947)	Nessus	SuSE Local Security Checks	8/18/2017	1/19/2021	critical
196813	RHEL 5 : minicom (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical
196767	RHEL 7 : minicom (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical
100656	GLSA-201706-13 : minicom: Remote execution of arbitrary code	Nessus	Gentoo Local Security Checks	6/7/2017	1/11/2021	critical
99639	Debian DLA-914-1 : minicom security update	Nessus	Debian Local Security Checks	4/25/2017	1/11/2021	critical
99759	SUSE SLES11 Security Update : minicom (SUSE-SU-2017:1136-1)	Nessus	SuSE Local Security Checks	5/1/2017	1/19/2021	critical
196801	RHEL 6 : minicom (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical