Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-40359

Опубликовано: 14 авг. 2023
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:invisible-island:xterm:*:*:*:*:*:*:*:*
Версия до 380 (исключая)

EPSS

Процентиль: 37%
0.00152
Низкий

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 2 года назад

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

CVSS3: 3.3
redhat
почти 2 года назад

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

CVSS3: 9.8
debian
почти 2 года назад

xterm before 380 supports ReGIS reporting for character-set names even ...

suse-cvrf
больше 1 года назад

Security update for xterm

CVSS3: 9.8
github
почти 2 года назад

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue.

EPSS

Процентиль: 37%
0.00152
Низкий

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo