Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
2.6
CVSSv2

CVE-2022-24130

Published: 31/01/2022 Updated: 07/11/2023
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 231
Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P

Vulnerability Summary

xterm through Patch 370, when Sixel support is enabled, allows malicious users to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

invisible-island xterm

debian debian linux 9.0

fedoraproject fedora 34

fedoraproject fedora 35

Vendor Advisories

Debian CVElist Bug Report Logs: xterm: CVE-2022-24130
Debian Bug report logs - #1004689 xterm: CVE-2022-24130 Package: src:xterm; Maintainer for src:xterm is Debian X Strike Force <debian-x@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 31 Jan 2022 19:39:01 UTC Severity: important Tags: security, upstream Found in versions xterm/344 ...
Red Hat: CVE-2022-24130
xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixelc via crafted text ...

Mailing Lists

Full Disclosure: Re: xterm buffer overflow via crafted sixel
Hi, On Sun, Jan 30, 2022 at 12:27:38PM -0500, nick black wrote: This issue has CVE-2022-24130 assigned Regards, Salvatore ...

References

CWE-120https://invisible-island.net/xterm/xterm.log.htmlhttps://www.openwall.com/lists/oss-security/2022/01/30/2https://www.openwall.com/lists/oss-security/2022/01/30/3https://twitter.com/nickblack/status/1487731459398025216https://lists.debian.org/debian-lts-announce/2022/02/msg00007.htmlhttps://security.gentoo.org/glsa/202208-22https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BP5Y4O7WBNLV24D22E6LE7RQFYOUVD2U/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4CWYYEBT6AJRJBBQU2KLUOQDHRM7WAV/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1004689https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32976CVE-2024-33557CVE-2024-36801CVE-2024-35654authentication bypassCVE-2024-24919CSRFcode executionCVE-2024-27348
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook