A kildclient update has been released for Debian GNU/Linux 7 LTS

Package : kildclient
Version : 2.11.1-1+deb7u1
CVE ID : CVE-2017-17511

It was discovered that there was a command-injection vulnerability in
kildclient, a "MUD" multiplayer real-time virtual world game.

For Debian 7 "Wheezy", this issue has been fixed in kildclient version
2.11.1-1+deb7u1. Thanks to Eduardo M Kalinowski for help in preparing this
update.

We recommend that you upgrade your kildclient packages.