Candidate: CVE-2017-7467
PublicDate: 2018-07-11 13:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7467
 http://www.openwall.com/lists/oss-security/2017/04/18/5
Description:
 A buffer overflow flaw was found in the way minicom before version 2.7.1
 handled VT100 escape sequences. A malicious terminal device could
 potentially use this flaw to crash minicom, or execute arbitrary code in
 the context of the minicom process.
Ubuntu-Description:
 Alexander Peslyak discovered that Minicom did not properly handle VT100 escape
 sequences. A malicious terminal device could use this flaw to cause minicom to
 crash or execute arbitrary code.
Notes:
Bugs:
Priority: medium
Discovered-by: Alexander Peslyak
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL]

Patches_minicom:
upstream_minicom: released (2.7-1+deb8u1, 2.7-1.1)
precise_minicom: ignored (reached end-of-life)
precise/esm_minicom: DNE (precise was needed)
trusty_minicom: released (2.7-1+deb8u1build0.14.04.1)
trusty/esm_minicom: DNE (trusty was released [2.7-1+deb8u1build0.14.04.1])
vivid/stable-phone-overlay_minicom: DNE
vivid/ubuntu-core_minicom: DNE
xenial_minicom: released (2.7-1+deb8u1build0.16.04.1)
yakkety_minicom: ignored (reached end-of-life)
zesty_minicom: ignored (reached end-of-life)
artful_minicom: ignored (reached end-of-life)
bionic_minicom: not-affected (2.7.1-1)
cosmic_minicom: not-affected (2.7.1-1)
devel_minicom: not-affected (2.7.1-1)