CVE-2017-7467
Publication date 11 July 2018
Last updated 25 August 2025
Ubuntu priority
Description
A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious terminal device could potentially use this flaw to crash minicom, or execute arbitrary code in the context of the minicom process.
From the Ubuntu Security Team
Alexander Peslyak discovered that Minicom did not properly handle VT100 escape sequences. A malicious terminal device could use this flaw to cause minicom to crash or execute arbitrary code.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| minicom | ||
| 18.04 LTS bionic |
Not affected
|
|
| 16.04 LTS xenial |
Fixed 2.7-1+deb8u1build0.16.04.1
|
|
| 14.04 LTS trusty |
Fixed 2.7-1+deb8u1build0.14.04.1
|
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
9.8 · Critical
|
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |