CVE-2011-2198

LOW 3.5CVE-2011-2198 · Published 21/05/2014 · updated 16/06/2026

In short

CVE-2011-2198 is a LOW (CVSS 3.5) vulnerability affecting gnome-terminal (gnome).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gnome-terminal gnome	`≤ 0.28.0`	No fix yet

Description

The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption and crash) via a crafted file, as demonstrated by a file containing the string "\033[100000000000000000@".

References

lists.opensuse.org/opensuse-updates/2012-08/msg00001.html · Third Party Advisory
openwall.com/lists/oss-security/2011/06/09/3 · Third Party Advisory
openwall.com/lists/oss-security/2011/06/13/10 · Third Party Advisory
oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html · Third Party Advisory
bugs.debian.org/cgi-bin/bugreport.cgi · Third Party Advisory
bugzilla.gnome.org/show_bug.cgi · Issue Tracking
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
git.gnome.org/browse/vte/commit · Exploit

More vulnerabilities in gnome-terminal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free