CVE-2024-37535

2024-06-0915:16:00

Debian Security Bug Tracker

security-tracker.debian.org

gnome vte

denial of service

vulnerability

cve-2024-37535

unix

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.6%

JSON

GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.

OSVersionArchitecturePackageVersionFilename
Debian12allvte<= 1:0.28.2-6vte_1:0.28.2-6_all.deb
Debian11allvte<= 1:0.28.2-6vte_1:0.28.2-6_all.deb
Debian10allvte<= 1:0.28.2-6vte_1:0.28.2-6_all.deb
Debian999allvte<= 1:0.28.2-6.1vte_1:0.28.2-6.1_all.deb
Debian13allvte<= 1:0.28.2-6.1vte_1:0.28.2-6.1_all.deb
Debian12allvte2.91<= 0.70.6-2~deb12u1vte2.91_0.70.6-2~deb12u1_all.deb
Debian11allvte2.91<= 0.62.3-1vte2.91_0.62.3-1_all.deb
Debian10allvte2.91<= 0.54.2-2vte2.91_0.54.2-2_all.deb
Debian999allvte2.91<= 0.75.92-1vte2.91_0.75.92-1_all.deb
Debian13allvte2.91<= 0.75.92-1vte2.91_0.75.92-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	vte	<= 1:0.28.2-6	vte_1:0.28.2-6_all.deb
Debian	11	all	vte	<= 1:0.28.2-6	vte_1:0.28.2-6_all.deb
Debian	10	all	vte	<= 1:0.28.2-6	vte_1:0.28.2-6_all.deb
Debian	999	all	vte	<= 1:0.28.2-6.1	vte_1:0.28.2-6.1_all.deb
Debian	13	all	vte	<= 1:0.28.2-6.1	vte_1:0.28.2-6.1_all.deb
Debian	12	all	vte2.91	<= 0.70.6-2~deb12u1	vte2.91_0.70.6-2~deb12u1_all.deb
Debian	11	all	vte2.91	<= 0.62.3-1	vte2.91_0.62.3-1_all.deb
Debian	10	all	vte2.91	<= 0.54.2-2	vte2.91_0.54.2-2_all.deb
Debian	999	all	vte2.91	<= 0.75.92-1	vte2.91_0.75.92-1_all.deb
Debian	13	all	vte2.91	<= 0.75.92-1	vte2.91_0.75.92-1_all.deb