CVE-2023-40359

🗓️ 14 Aug 2023 00:00:00Reported by Debian Security Bug TrackerType

debiancve

debiancve🔗 security-tracker.debian.org👁 45 Views

xterm 380 ReGIS reporting vulnerabilit

Reporter	Title	Published	Views	Family All 29
ATTACKERKB	CVE-2023-40359	14 Aug 202317:15	–	attackerkb
BDU FSTEC	The vulnerability of the ReGIS Reporting function for creating vector graphics in the XTerm terminal emulator allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.	16 Nov 202300:00	–	bdu_fstec
CBLMariner	CVE-2023-40359 affecting package xterm for versions less than 380-1	28 Sep 202311:57	–	cbl_mariner
Circl	CVE-2023-40359	14 Aug 202320:19	–	circl
CNNVD	Xterm Security Vulnerability	14 Aug 202300:00	–	cnnvd
CVE	CVE-2023-40359	14 Aug 202300:00	–	cve
Cvelist	CVE-2023-40359	14 Aug 202300:00	–	cvelist
EUVD	EUVD-2023-44930	3 Oct 202520:07	–	euvd
Microsoft CVE	xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e. neither alphanumeric nor underscore) aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.	23 Aug 202307:00	–	mscve
NVD	CVE-2023-40359	14 Aug 202317:15	–	nvd

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	13	any	xterm	382-2	xterm_382-2_any.deb
Debian	14	any	xterm	382-2	xterm_382-2_any.deb
Debian	999	any	xterm	382-2	xterm_382-2_any.deb
Debian	11	any	xterm	366-1+deb11u1	xterm_366-1+deb11u1_any.deb
Debian	12	any	xterm	379-1	xterm_379-1_any.deb

14 Aug 2023 00:00Current

8.9High risk

Vulners AI Score8.9

CVSS 3.19.8

EPSS0.00734

SSVC

xterm regis reporting character-set names pointer/overflow experimental feature unix