xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xterm-resizeUpgrade xterm | May 4, 2022 | Feb 10, 2021 |
| Alpine Linux | — | Upgrade xterm | Aug 22, 2024 | Feb 10, 2021 |
| Amazon Linux Ami 2 | — | Upgrade xterm-debuginfoUpgrade xterm | Mar 22, 2021 | Feb 10, 2021 |
| Amazon_linux | — | Upgrade xterm | Mar 20, 2021 | Feb 10, 2021 |
| Centos_linux | — | Upgrade xterm-debuginfoUpgrade xterm-debugsourceUpgrade xterm-resize-debuginfoUpgrade xterm-resizeUpgrade xterm | Feb 19, 2021 | Feb 10, 2021 |
| Debian | — | Upgrade xterm | Feb 16, 2021 | Feb 10, 2021 |
| Gentoo Linux | — | Upgrade x11-terms/xterm. | Aug 16, 2022 | Feb 10, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xterm | Apr 30, 2021 | Feb 10, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xterm | May 19, 2021 | Feb 10, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xtermUpgrade xterm-resize | May 18, 2021 | Feb 10, 2021 |
| Oracle Solaris | — | Upgrade terminal/xterm to version 366-11.4.33.0.1.94.0 on Solaris 11.4Upgrade terminal/resize to version 0.366-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Feb 10, 2021 |
| Oracle_linux | — | Upgrade xterm-resizeUpgrade xterm | Feb 19, 2021 | Feb 10, 2021 |
| Redhat_linux | — | Upgrade xterm-debuginfoUpgrade xterm-resize-debuginfoUpgrade xtermNo solution existsUpgrade xterm-debugsourceUpgrade xterm-resize | Feb 19, 2021 | Feb 10, 2021 |
| Rocky_linux | — | Upgrade xterm-debuginfoUpgrade xtermUpgrade xterm-debugsourceUpgrade xterm-resizeUpgrade xterm-resize-debuginfo | Mar 12, 2024 | Feb 10, 2021 |
| Suse | — | Upgrade xterm-binUpgrade xterm | Jun 15, 2021 | Feb 10, 2021 |
| Ubuntu | — | Upgrade xterm | Feb 25, 2021 | Feb 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub