Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-40359

Опубликовано: 14 авг. 2023
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:invisible-island:xterm:*:*:*:*:*:*:*:*
Версия до 380 (исключая)

EPSS

Процентиль: 31%
0.00116
Низкий

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 2 лет назад

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

CVSS3: 3.3
redhat
около 2 лет назад

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

CVSS3: 9.8
msrc
около 2 лет назад

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e. neither alphanumeric nor underscore) aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

CVSS3: 9.8
debian
около 2 лет назад

xterm before 380 supports ReGIS reporting for character-set names even ...

suse-cvrf
почти 2 года назад

Security update for xterm

EPSS

Процентиль: 31%
0.00116
Низкий

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo