minicom - Out of Bounds Write in vt100.c
Summary
DLA-914-1: minicom - security update. Affects minicom versions < 2.6.1-1+deb7u1. Fixed in 2.6.1-1+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
minicom is a communication program that allows users to connect to other computers using various protocols, such as serial ports, modems, and network connections. It provides a terminal emulator with a command-line interface for managing and interacting with remote systems. The minicom package is widely used in Debian 7 Wheezy.
Vulnerability Detail
The vulnerability, identified as CVE-2017-7467, is an out-of-bounds write issue in the vt100.c file of minicom. This vulnerability could be exploited by an attacker to write beyond the bounds of an allocated buffer, potentially leading to remote code execution or a denial of service attack. The issue has been fixed in version 2.6.1-1+deb7u1 of minicom.
How To Fix
Minimum fixed version
2.6.1-1+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade minicomTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the minicom package in Debian 7 Wheezy is vulnerable to an out-of-bounds write issue in the vt100.c file. This vulnerability can be fixed by upgrading to version 2.6.1-1+deb7u1 or later. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for minicom →
FAQ
Minicom is a communication program used for connecting to other computers using various protocols.
The vulnerability could allow an attacker to execute arbitrary code or cause a denial of service.
You can use the Vulert Playground at Vulert Scanner to check if your minicom package is affected by this vulnerability.
No, upgrading to the fixed version is the recommended solution.
You can find more information about Debian LTS security advisories at https://wiki.debian.org/LTS.
Related vulnerabilities
Recent vulnerabilities recorded for minicom.
