CVE-2021-27135

概要

参考情報

• seclists.org/fulldisclosure/2021/May/52 · Mailing List
• openwall.com/lists/oss-security/2021/02/10/7 · Mailing List
• access.redhat.com/security/cve/CVE-2021-27135 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• bugzilla.suse.com/show_bug.cgi · Issue Tracking
• ThomasDickey/xterm-snapshots commit 82ba55b · Patch
• invisible-island.net/xterm/xterm.log.html · Release Notes
• lists.debian.org/debian-lts-announce/2021/02/msg00019.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35LK2ZXEIJUOGOA7FV2TJL3L6LFJ4X5S
• news.ycombinator.com/item · Issue Tracking
• security.gentoo.org/glsa/202208-22 · Third Party Advisory
• openwall.com/lists/oss-security/2021/02/09/7 · Mailing List
• openwall.com/lists/oss-security/2021/02/09/9 · Mailing List

xterm のその他の脆弱性

• CVE-2023-40359緊急 9.8xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor un…
• CVE-2022-45063緊急 9.8xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command executio…
• CVE-2022-24130中 5.5xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via c…
• CVE-2008-2383緊急 9.3CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a …
• CVE-2006-7236緊急 9.3The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assist…