CVE-2022-45063
10.11.2022, 16:15
xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| invisible-island | xterm | 𝑥 < 375 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| xterm-330 |
| ||||||||||||||||||||||||||||||||||
| xterm-bin-330 |
|
Red Hat Enterprise Linux Releases
References