CVE-2021-27135

严重 9.8CVE-2021-27135 · Published 10/02/2021 · updated 17/06/2026

要点

CVE-2021-27135 是影响 xterm (invisible-island) 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：7.8%，高于 94.7% 的漏洞。
修复：升级到 366 或更高版本。

Package	Affected versions	Patched versions
xterm invisible-island	`< 366`	`366`

Description

xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence.

References

seclists.org/fulldisclosure/2021/May/52 · Mailing List
openwall.com/lists/oss-security/2021/02/10/7 · Mailing List
access.redhat.com/security/cve/CVE-2021-27135 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
bugzilla.suse.com/show_bug.cgi · Issue Tracking
ThomasDickey/xterm-snapshots commit 82ba55b · Patch
invisible-island.net/xterm/xterm.log.html · Release Notes
lists.debian.org/debian-lts-announce/2021/02/msg00019.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35LK2ZXEIJUOGOA7FV2TJL3L6LFJ4X5S
news.ycombinator.com/item · Issue Tracking
security.gentoo.org/glsa/202208-22 · Third Party Advisory
openwall.com/lists/oss-security/2021/02/09/7 · Mailing List
openwall.com/lists/oss-security/2021/02/09/9 · Mailing List

xterm 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free