PT-2022-6590

Name of the Vulnerable Software and Affected Versions xterm versions through Patch 370 Description The issue is related to a buffer overflow in the set sixel function within the graphics sixel.c component of the xterm terminal emulator. This occurs when Sixel support is enabled and an attacker...

CVE-2022-24130: Buffer Copy without Checking Size of Input

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

Xterm 安全漏洞

Xterm is a terminal emulator for the X Window System by Thomas Dickey, a personal developer. It is intended to provide Dec Vt102 and Tektronix 4014 compatible terminals for programs that cannot use the window system directly. A security vulnerability exists in Xterm that arises from a networked...

Mageia: Security Advisory (MGASA-2021-0094)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence.

...

NewStart CGSL CORE 5.04 / MAIN 5.04 : xterm Vulnerability (NS-SA-2021-0107)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has xterm packages installed that are affected by a vulnerability: - xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining charact...

NewStart CGSL MAIN 6.02 : xterm Vulnerability (NS-SA-2021-0121)

The remote NewStart CGSL host, running version MAIN 6.02, has xterm packages installed that are affected by a vulnerability: - xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

openSUSE: Security Advisory for xterm (openSUSE-SU-2021:2011-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:2011-1 Security update for xterm

This update for xterm fixes the following issues: - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. bsc1182091...

Security update for xterm (important)

openSUSE Security Update: Security update for xterm Announcement ID: openSUSE-SU-2021:2011-1 Rating: important References: 1182091 Cross-References: CVE-2021-27135 CVSS scores: CVE-2021-27135 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-27135 SUSE: 7.5...

openSUSE 15 Security Update : xterm (openSUSE-SU-2021:0900-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:0900-1 advisory. - xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8...

openSUSE: Security Advisory for xterm (openSUSE-SU-2021:0900-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:0900-1 Security update for xterm

This update for xterm fixes the following issues: - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. bsc1182091 This update was imported from the SUSE:SLE-15-SP2:Update update project...

Security update for xterm (important)

openSUSE Security Update: Security update for xterm Announcement ID: openSUSE-SU-2021:0900-1 Rating: important References: 1182091 Cross-References: CVE-2021-27135 CVSS scores: CVE-2021-27135 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-27135 SUSE: 7.5...

Vulnerability fixed in Xterm

The developers of Xterm have fixed a vulnerability. The vulnerability can be exploited by an unauthenticated malicious person at a remote user to cause a Denial-of-Service, or possibly executing arbitrary code with the privileges of the process. -= SUSE =- SUSE has made updates available to fix t...

SUSE SLED15 / SLES15 Security Update : xterm (SUSE-SU-2021:2011-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2011-1 advisory. - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. bsc1182091 Tenable has extracted the preceding description block...

SUSE SLES11 Security Update : xterm (SUSE-SU-2021:14747-1)

The remote SUSE Linux SLES11 / SLESSAP11 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:14747-1 advisory. - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. bsc1182091 Tenable has extracted the preceding description blo...

SUSE SLES15 Security Update : xterm (SUSE-SU-2021:2013-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2013-1 advisory. - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. bsc1182091 Tenable has extracted the preceding description bloc...

SUSE SLES12 Security Update : xterm (SUSE-SU-2021:2014-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:2014-1 advisory. - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. bsc1182091 Tenable has extracted the preceding description bloc...

SUSE: Security Advisory (SUSE-SU-2021:2014-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...