xterm before 375 allows code execution via font ops e.g. because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

🗓️ 16 Nov 2022 08:00:00Reported by MicrosoftType

mscve🔗 msrc.microsoft.com👁 10 Views

Xterm versions before 375 allow code execution via font operations in OSC 50 with Zsh vi mode.

Reporter	Title	Published	Views	Family All 80
attackerkb	CVE-2022-45063	10 Nov 202216:15	–	attackerkb
AlmaLinux	Low: xterm security update	13 May 202500:00	–	almalinux
AstraLinux	Astra Linux – Vulnerability in xterm	14 Sep 202612:41	–	astralinux
BDU FSTEC	The vulnerability of the XTerm terminal emulator arises from the lack of measures taken to sanitize input data. This allows attackers to gain access to confidential information, compromise its integrity, and cause service failures.	21 Aug 202300:00	–	bdu_fstec
CBLMariner	CVE-2022-45063 affecting package xterm for versions less than 380-1	28 Sep 202311:57	–	cbl_mariner
Tenable Nessus	Rocky Linux 9 [CIQ] Security Update: xterm / xterm-debuginfo / xterm-debugsource / xterm-resize / etc (crlsa-2025_7427)	1 Oct 202600:00	–	nessus
Tenable Nessus	Fedora 36 : xterm (2022-681bbe67b6)	22 Dec 202200:00	–	nessus
Tenable Nessus	Fedora 35 : xterm (2022-8cf76a9ceb)	23 Dec 202200:00	–	nessus
Tenable Nessus	Fedora 37 : xterm (2022-af5f1eee2c)	14 Nov 202400:00	–	nessus
Tenable Nessus	GLSA-202211-09 : xterm: Arbitrary Code Execution	22 Nov 202200:00	–	nessus

Vulners

Node

microsoft cbl2_xterm_380-1Range<380-1

16 Nov 2022 08:00Current

8.5High risk

Vulners AI Score8.5

CVSS 3.19.8

EPSS0.05423

SSVC

xterm font operations escape sequence zsh vi mode code execution