CVE-2022-24130

Mô tả

Tham khảo

• invisible-island.net/xterm/xterm.log.html · Patch
• lists.debian.org/debian-lts-announce/2022/02/msg00007.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BP5Y4O7WBNLV24D22E6LE7RQFYOUVD2U
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4CWYYEBT6AJRJBBQU2KLUOQDHRM7WAV
• security.gentoo.org/glsa/202208-22 · Third Party Advisory
• twitter.com/nickblack/status/1487731459398025216 · Exploit
• openwall.com/lists/oss-security/2022/01/30/2 · Exploit
• openwall.com/lists/oss-security/2022/01/30/3 · Exploit

Lỗ hổng khác của xterm

• CVE-2023-40359NGHIÊM TRỌNG 9.8xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor un…
• CVE-2022-45063NGHIÊM TRỌNG 9.8xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command executio…
• CVE-2021-27135NGHIÊM TRỌNG 9.8xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UT…
• CVE-2008-2383NGHIÊM TRỌNG 9.3CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a …
• CVE-2006-7236NGHIÊM TRỌNG 9.3The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assist…