Lucene search
Veracode Vulnerability DatabaseVERACODE:34094HistoryFeb 08, 2022 - 8:14 p.m.
Denial Of Service (DoS)
2022-02-0820:14:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
35.2%
xterm is vulnerable to denial of service. The vulnerability exists due to a buffer overflow in set_sixel in graphics_sixel.c via crafted text.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xterm:sid | eq | 362-1 | |
| xterm:sid | eq | 366-1 | |
| xterm:edge | eq | 367-r0 | |
| xterm:edge | eq | 354-r0 | |
| xterm:edge | eq | 368-r0 | |
| xterm:edge | eq | 366-r0 | |
| xterm:edge | eq | 370-r0 | |
| xterm:edge | eq | 353-r2 | |
| xterm:edge | eq | 369-r0 | |
| xterm:edge | eq | 356-r0 |
References
invisible-island.net/xterm/xterm.log.html
lists.debian.org/debian-lts-announce/2022/02/msg00007.html
lists.fedoraproject.org/archives/list/[email protected]/message/BP5Y4O7WBNLV24D22E6LE7RQFYOUVD2U/
lists.fedoraproject.org/archives/list/[email protected]/message/T4CWYYEBT6AJRJBBQU2KLUOQDHRM7WAV/
security-tracker.debian.org/tracker/CVE-2022-24130
security.gentoo.org/glsa/202208-22
twitter.com/nickblack/status/1487731459398025216
www.openwall.com/lists/oss-security/2022/01/30/2
www.openwall.com/lists/oss-security/2022/01/30/3
Related
debian
debian
[SECURITY] [DLA 2913-1] xterm security update
2022-02-07 18:27:11
ubuntucve
ubuntucve
CVE-2022-24130
2022-01-31 00:00:00
openvas
openvas
Fedora: Security Advisory for xterm (FEDORA-2022-9bf751cdf7)
2022-02-16 00:00:00
Mageia: Security Advisory (MGASA-2022-0051)
2022-02-09 00:00:00
Fedora: Security Advisory for xterm (FEDORA-2022-965978ed67)
2022-02-16 00:00:00
osv
osv
xterm - security update
2022-02-07 00:00:00
alpinelinux
alpinelinux
CVE-2022-24130
2022-01-31 05:15:08
fedora
fedora
[SECURITY] Fedora 35 Update: xterm-370-3.fc35
2022-02-16 01:28:27
[SECURITY] Fedora 34 Update: xterm-370-3.fc34
2022-02-16 01:13:54
prion
prion
Buffer overflow
2022-01-31 05:15:00
cve
cve
CVE-2022-24130
2022-01-31 05:15:08
redhatcve
redhatcve
CVE-2022-24130
2022-01-31 17:56:59
nessus
nessus
EulerOS 2.0 SP8 : xterm (EulerOS-SA-2022-1593)
2022-04-25 00:00:00
Debian DLA-2913-1 : xterm - LTS security update
2022-02-07 00:00:00
SUSE SLES12 Security Update : xterm (SUSE-SU-2022:3952-1)
2022-11-13 00:00:00
nvd
nvd
CVE-2022-24130
2022-01-31 05:15:08
mageia
mageia
Updated xterm packages fix security vulnerability
2022-02-05 23:23:13
cvelist
cvelist
CVE-2022-24130
2022-01-31 05:01:06
debiancve
debiancve
CVE-2022-24130
2022-01-31 05:15:08
cbl_mariner
cbl_mariner
CVE-2022-24130 affecting package xterm for versions less than 372-1
2022-08-31 06:12:39
gentoo
gentoo
xterm: Multiple Vulnerabilities
2022-08-14 00:00:00