The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption and crash) via a crafted file, as demonstrated by a file containing the string "\033[100000000000000000@".
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade vte | Jul 30, 2024 | May 21, 2014 |
| Gentoo Linux | — | Upgrade dev-php/suhosin.Upgrade x11-libs/vte.Upgrade www-apps/egroupware.Upgrade x11-misc/slock.Upgrade sys-cluster/ganglia.Upgrade net-analyzer/lft.Upgrade net-im/gg-transport. | Oct 30, 2017 | May 21, 2014 |
| Oracle Solaris | — | Upgrade terminal/gnome-terminal to version 2.30.2-0.175.2.8.0.4.0 on Solaris 11.2Upgrade library/java/qdox to version 1.9.2-0.175.2.8.0.4.0 on Solaris 11.2Upgrade developer/parser/java_cup to version 0.10-0.175.2.8.0.4.0 on Solaris 11.2Upgrade developer/java/jdepend to version 2.9-0.175.2.8.0.4.0 on Solaris 11.2Upgrade system/management/wbem/wbemcli to version 1.3.9.1-0.175.2.8.0.4.0 on Solaris 11.2 | May 29, 2017 | May 21, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 8, 2011 |
| Suse | — | Upgrade vte-develUpgrade gnome-pty-helperUpgrade libvte2_90-9Upgrade vte-tools-debuginfoUpgrade libvte2_90-9-debuginfoUpgrade gnome-pty-helper-debuginfoUpgrade vteUpgrade glade-catalog-vteUpgrade vte-toolsUpgrade vte-langUpgrade vte-debugsource | Dec 12, 2013 | Dec 10, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub