Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-40359

Опубликовано: 14 авг. 2023
Источник: debian
EPSS Низкий

Описание

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
xtermfixed382-2package

Примечания

  • https://invisible-island.net/xterm/xterm.log.html#xterm_380

  • ReGIS support not enabled in Debian builds

EPSS

Процентиль: 37%
0.00152
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 2 года назад

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

CVSS3: 3.3
redhat
почти 2 года назад

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

CVSS3: 9.8
nvd
почти 2 года назад

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

suse-cvrf
больше 1 года назад

Security update for xterm

CVSS3: 9.8
github
почти 2 года назад

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue.

EPSS

Процентиль: 37%
0.00152
Низкий