CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
Affected Products (NVD)
VendorProductVersion
invisible-islandxterm
𝑥
≤ 370
debiandebian_linux
9.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
xterm
bookworm
379-1
fixed
bullseye
366-1+deb11u1
fixed
sid
395-1
fixed
trixie
395-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
xterm
bionic
needs-triage
focal
needs-triage
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
ignored
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
xterm-330
suse enterprise desktop 15 SP3
150200.11.6.1
fixed
suse enterprise desktop 15 SP4
150200.11.6.1
fixed
suse enterprise desktop 15 SP5
150200.11.6.1
fixed
suse enterprise desktop 15 SP6
150200.11.6.1
fixed
suse enterprise desktop 15 SP7
150200.11.6.1
fixed
suse enterprise sap 15 SP3
150200.11.6.1
fixed
suse enterprise sap 15 SP4
150200.11.6.1
fixed
suse enterprise sap 15 SP5
150200.11.6.1
fixed
suse enterprise sap 15 SP6
150200.11.6.1
fixed
suse enterprise sap 15 SP7
150200.11.6.1
fixed
suse enterprise server 15 SP3
150200.11.6.1
fixed
suse enterprise server 15 SP4
150200.11.6.1
fixed
suse enterprise server 15 SP5
150200.11.6.1
fixed
suse enterprise server 15 SP6
150200.11.6.1
fixed
suse enterprise server 15 SP7
150200.11.6.1
fixed
xterm-bin-330
suse enterprise desktop 15 SP3
150200.11.6.1
fixed
suse enterprise desktop 15 SP4
150200.11.6.1
fixed
suse enterprise desktop 15 SP5
150200.11.6.1
fixed
suse enterprise desktop 15 SP6
150200.11.6.1
fixed
suse enterprise desktop 15 SP7
150200.11.6.1
fixed
suse enterprise sap 15 SP3
150200.11.6.1
fixed
suse enterprise sap 15 SP4
150200.11.6.1
fixed
suse enterprise sap 15 SP5
150200.11.6.1
fixed
suse enterprise sap 15 SP6
150200.11.6.1
fixed
suse enterprise sap 15 SP7
150200.11.6.1
fixed
suse enterprise server 15 SP3
150200.11.6.1
fixed
suse enterprise server 15 SP4
150200.11.6.1
fixed
suse enterprise server 15 SP5
150200.11.6.1
fixed
suse enterprise server 15 SP6
150200.11.6.1
fixed
suse enterprise server 15 SP7
150200.11.6.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
xterm
RHEL 9
0:366-12.el9_6
fixed
xterm-resize
RHEL 9
0:366-12.el9_6
fixed
Common Weakness Enumeration
References
https://invisible-island.net/xterm/xterm.log.html
https://lists.debian.org/debian-lts-announce/2022/02/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BP5Y4O7WBNLV24D22E6LE7RQFYOUVD2U/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4CWYYEBT6AJRJBBQU2KLUOQDHRM7WAV/
https://security.gentoo.org/glsa/202208-22
https://twitter.com/nickblack/status/1487731459398025216
https://www.openwall.com/lists/oss-security/2022/01/30/2
https://www.openwall.com/lists/oss-security/2022/01/30/3
https://invisible-island.net/xterm/xterm.log.html
https://lists.debian.org/debian-lts-announce/2022/02/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BP5Y4O7WBNLV24D22E6LE7RQFYOUVD2U/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4CWYYEBT6AJRJBBQU2KLUOQDHRM7WAV/
https://security.gentoo.org/glsa/202208-22
https://twitter.com/nickblack/status/1487731459398025216
https://www.openwall.com/lists/oss-security/2022/01/30/2
https://www.openwall.com/lists/oss-security/2022/01/30/3