The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vte | Oct 1, 2024 | Jul 22, 2012 |
| Debian | — | Upgrade vte | Jul 30, 2024 | Jul 22, 2012 |
| Gentoo Linux | — | Upgrade x11-libs/vte.Upgrade www-apps/egroupware.Upgrade dev-php/suhosin.Upgrade x11-misc/slock.Upgrade sys-cluster/ganglia.Upgrade net-analyzer/lft.Upgrade net-im/gg-transport. | Oct 30, 2017 | Jul 22, 2012 |
| Oracle Solaris | — | Upgrade library/java/qdox to version 1.9.2-0.175.2.8.0.4.0 on Solaris 11.2Upgrade developer/parser/java_cup to version 0.10-0.175.2.8.0.4.0 on Solaris 11.2Upgrade terminal/gnome-terminal to version 2.30.2-0.175.2.8.0.4.0 on Solaris 11.2Upgrade system/management/wbem/wbemcli to version 1.3.9.1-0.175.2.8.0.4.0 on Solaris 11.2Upgrade developer/java/jdepend to version 2.9-0.175.2.8.0.4.0 on Solaris 11.2 | May 29, 2017 | Jul 22, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 15, 2012 |
| Suse | — | Upgrade python-vteUpgrade libvte9Upgrade vte2-develUpgrade vte2-lang | Dec 12, 2013 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub