Rapid7

vulnerability

Alma Linux: CVE-2021-27135: Important: xterm security update (ALSA-2021-0611)

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Feb 10, 2021
Added
May 4, 2022
Modified
Mar 31, 2026

Description

xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence.

Solutions

alma-upgrade-xtermalma-upgrade-xterm-resize
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.