CVE-2021-33477: Debian Linux

High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days.

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline.

Affected products

• Debian Debian Linux: version 9.0 only
• Eterm Project Eterm: version 0.9.7 only
• Fedoraproject Fedora: version 33 only; version 34 only
• Mrxvt Project Mrxvt: version 0.5.4 only
• Rxvt-Unicode Project Rxvt-Unicode: version 9.22 only
• Rxvt Project Rxvt: version 2.7.10 only

Published 2021-05-20. Last modified 2026-06-17.