Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-40359

Опубликовано: 14 авг. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 9.8

Описание

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

384-1ubuntu1
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

not-affected

384-1ubuntu1
esm-apps/resolute

not-affected

384-1ubuntu1
esm-infra-legacy/xenial

needs-triage

esm-infra/xenial

ignored

end of ESM support, was needs-triage
focal

ignored

end of standard support, was needs-triage

Показывать по

EPSS

Процентиль: 51%
0.00734
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 3.3
redhat
почти 3 года назад

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

CVSS3: 9.8
nvd
почти 3 года назад

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

CVSS3: 9.8
msrc
почти 3 года назад

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e. neither alphanumeric nor underscore) aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

CVSS3: 9.8
debian
почти 3 года назад

xterm before 380 supports ReGIS reporting for character-set names even ...

suse-cvrf
больше 2 лет назад

Security update for xterm

EPSS

Процентиль: 51%
0.00734
Низкий

9.8 Critical

CVSS3