vulnerability

Red Hat: CVE-2022-45063: xterm: code execution via OSC 50 input sequences (Multiple Advisories)

Name: Red Hat: CVE-2022-45063: xterm: code execution via OSC 50 input sequences (Multiple Advisories)
Creator: Red Hat
Published: 2022-11-10T00:00:00.000Z
Keywords: CVE, CWE-77, Red Hat, 2022, 45063, xterm, redhat-upgrade-xterm, redhat-upgrade-xterm-debuginfo, redhat-upgrade-xterm-debugsource, redhat-upgrade-xterm-resize, redhat-upgrade-xterm-resize-debuginfo, Severity 9

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:N/A:C)

Published

Nov 10, 2022

Added

May 15, 2025

Modified

Jun 17, 2026

Description

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

Solutions

redhat-upgrade-xtermredhat-upgrade-xterm-debuginforedhat-upgrade-xterm-debugsourceredhat-upgrade-xterm-resizeredhat-upgrade-xterm-resize-debuginfo

References

CWE-77
EUVD-EUVD-2022-47985
NVD-CVE-2022-45063
REDHAT-RHSA-2025:7427
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-47985

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report