CVE-2022-4170

Name of the Vulnerable Software and Affected Versions rxvt-unicode versions 9.25 through 9.26

Description The issue allows for remote code execution in the Perl background extension of the rxvt-unicode package. This occurs when an attacker can control the data written to the user's terminal and certain options are set.

Recommendations For rxvt-unicode versions 9.25 and 9.26, consider disabling the Perl background extension as a temporary workaround until a patch is available. Restrict access to the terminal to minimize the risk of exploitation. Avoid using options that allow an attacker to control the data written to the user's terminal in the affected versions.