CVE-2022-45063

Mô tả

Tham khảo

• openwall.com/lists/oss-security/2022/11/10/1 · Mailing List
• openwall.com/lists/oss-security/2022/11/10/5 · Mailing List
• openwall.com/lists/oss-security/2024/06/15/1
• openwall.com/lists/oss-security/2024/06/17/1
• invisible-island.net/xterm/xterm.log.html · Release Notes
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TPVNTYFFWNTGZJJQAA4MGGFSTXA4XEA
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5T2JI5JCHPTXX2KJU45H2XAHQSFVEJ2Y
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IVD3I2ZFXGOY6BA2FNS7WPFMPFBDHFWC
• news.ycombinator.com/item · Exploit
• security.gentoo.org/glsa/202211-09 · Third Party Advisory

Lỗ hổng khác của xterm

• CVE-2023-40359NGHIÊM TRỌNG 9.8xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor un…
• CVE-2022-24130TRUNG BÌNH 5.5xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via c…
• CVE-2021-27135NGHIÊM TRỌNG 9.8xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UT…
• CVE-2008-2383NGHIÊM TRỌNG 9.3CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a …
• CVE-2006-7236NGHIÊM TRỌNG 9.3The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assist…