CVE-2024-37535

2024-06-0900:00:00

ubuntu.com

gnome vte

denial of service

memory consumption

window resize

escape sequence

cve-2000-0476

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.6%

JSON

GNOME VTE before 0.76.3 allows an attacker to cause a denial of service
(memory consumption) via a window resize escape sequence, a related issue
to CVE-2000-0476.

Bugs

Notes

Author	Note
alexmurray	PoC in oss-security reply

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchvte2.91< anyUNKNOWN
ubuntu20.04noarchvte2.91< 0.60.3-0ubuntu1~20.5UNKNOWN
ubuntu22.04noarchvte2.91< 0.68.0-1ubuntu0.1UNKNOWN
ubuntu23.10noarchvte2.91< 0.74.0-2ubuntu0.1UNKNOWN
ubuntu24.04noarchvte2.91< 0.76.0-1ubuntu0.1UNKNOWN
ubuntu16.04noarchvte2.91< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	vte2.91	< any	UNKNOWN
ubuntu	20.04	noarch	vte2.91	< 0.60.3-0ubuntu1~20.5	UNKNOWN
ubuntu	22.04	noarch	vte2.91	< 0.68.0-1ubuntu0.1	UNKNOWN
ubuntu	23.10	noarch	vte2.91	< 0.74.0-2ubuntu0.1	UNKNOWN
ubuntu	24.04	noarch	vte2.91	< 0.76.0-1ubuntu0.1	UNKNOWN
ubuntu	16.04	noarch	vte2.91	< any	UNKNOWN