CVE-2011-2198

2014-05-2114:55:05

CWE-20

CWE-399

redhat

web.nvd.nist.gov

cve-2011-2198

gnome-terminal

vte

denial of service

authenticated users

caps.c

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

AI Score

5.9

Confidence

Low

EPSS

0.009

Percentile

82.6%

JSON

The “insert-blank-characters” capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption and crash) via a crafted file, as demonstrated by a file containing the string “\033[100000000000000000@”.

Affected configurations

Nvd

Node

gnomegnome-terminalRange≤0.28.0

Node

opensuseopensuseMatch11.4

opensuseopensuseMatch12.1

Node

oraclesolarisMatch11.2

VendorProductVersionCPE
gnomegnome-terminal*cpe:2.3:a:gnome:gnome-terminal:*:*:*:*:*:*:*:*
opensuseopensuse11.4cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
opensuseopensuse12.1cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*
oraclesolaris11.2cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gnome	gnome-terminal	*	cpe:2.3:a:gnome:gnome-terminal::::::::
opensuse	opensuse	11.4	cpe:2.3:o:opensuse:opensuse:11.4:::::::*
opensuse	opensuse	12.1	cpe:2.3:o:opensuse:opensuse:12.1:::::::*
oracle	solaris	11.2	cpe:2.3:o:oracle:solaris:11.2:::::::*