GLSA-202208-22 : xterm: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-22 xterm: Multiple Vulnerabilities - xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence. CVE-2021-27135 ...

CVE-2022-29978

There is a floating point exception error in sixelencoderdoresize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...

DEBIAN-CVE-2022-29978

There is a floating point exception error in sixelencoderdoresize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...

UBUNTU-CVE-2022-29978

There is a floating point exception error in sixelencoderdoresize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...

libsixel 安全漏洞

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. libsixel img2sixel version 1.8.6 suffers from a denial of service vulnerability stemming from a floating-point exception error in ssixelencoderdoresize, encoder.c:633. A remo...

EulerOS 2.0 SP8 : xterm (EulerOS-SA-2022-1593)

According to the versions of the xterm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted...

libsixel buffer overflow vulnerability (CNVD-2022-31763)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in versions of libsixel prior to 1.10, which stems from a buffer overflow in libsixel/src/quant.c:867. A remote attacker could exploit...

libsixel resource management error vulnerability (CNVD-2022-31766)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A resource management error vulnerability exists in libsixel version 1.8.6, which stems from the presence of heap-based post-release reuse in libsixel/src/dither.c:388. An...

libsixel resource management error vulnerability (CNVD-2022-31765)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A resource management error vulnerability exists in libsixel version 1.10.0, which stems from the presence of post-release reuse in libsixel/src/dither.c:379. An attacker cou...

The vulnerability of the gif_process_raster function in the fromgif.c component of the SIXEL Libsixel encoder/decoder implementation allows a attacker to cause a service failure.

The vulnerability of the gifprocessraster function in the fromgif.c component of the SIXEL Libsixel encoder/decoder implementation is related to the output of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability in the dither.c component of the SIXEL Libsixel encoder/decoder implementation allows a attacker to cause a service failure.

The vulnerability of the dither.c component in the SIXEL Libsixel encoder/decoder implementation is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service interruptions using a specially created PNG file...

The vulnerability of the sixel_encoder_output_without_macro function in the encoder.c component of the SIXEL Libsixel encoder/decoder implementation allows a hacker to cause a service failure.

The vulnerability of the sixelencoderoutputwithoutmacro function in the encoder.c component of the SIXEL Libsixel encoder/decoder implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure by converting a speciall...

The vulnerability of the `sixel_encode_highcolor` function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the sixelencodehighcolor function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...

Double Free

Overview Affected versions of this package are vulnerable to Double Free via the component sixelchunkdestroy at /root/libsixel/src/chunk.c. Remediation There is no fixed version for libsixel. References - GitHub Issue...

编号撤回

libsixel is a package that provides an encoding/decoding implementation for DEC SIXEL graphics and other converter programs. libsixel v1.8.6 contains a security vulnerability that stems from a double release via the component Sixelchunkdestroy in /root/libsixel/src/chunk.c. No detailed...

PT-2022-8948 · Saitoha · Libsixel

Name of the Vulnerable Software and Affected Versions: saitoha libsixel version 1.8.6 Description: A double free issue was discovered in the sixel chunk destroy component at /root/libsixel/src/chunk.c. Recommendations: For saitoha libsixel version 1.8.6, at the moment, there is no information abo...

OESA-2022-1563 xterm security update

It is a terminal emulator for the X Window System. Security Fixes: xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text.CVE-2022-24130...

UBUNTU-CVE-2021-46700

In libsixel 1.8.6, sixelencoderoutputwithoutmacro called from sixelencoderencodeframe in encoder.c has a double free...

Debian: Security Advisory (DLA-2913-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0051 Updated xterm packages fix security vulnerability

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text. CVE-2022-24130...