CVE-2017-7467

CRITICAL 9.8CVE-2017-7467 · Published 11/07/2018 · updated 17/06/2026

In short

CVE-2017-7467 is a CRITICAL (CVSS 9.8) vulnerability affecting minicom (minicom project).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 86.0% of all vulnerabilities.
Fix: update to 2.7.1 or later.

Package	Affected versions	Patched versions
minicom minicom_project	`< 2.7.1`	`2.7.1`

Description

A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious terminal device could potentially use this flaw to crash minicom, or execute arbitrary code in the context of the minicom process.

References

openwall.com/lists/oss-security/2017/04/18/5 · Exploit
securityfocus.com/bid/97966 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
security.gentoo.org/glsa/201706-13 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free