CVE-2024-37535

GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.4 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CISA-ADPADP
4.4 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Debian logo
Debian Releases
Debian Product
Codename
vte
bookworm
no-dsa
bullseye
no-dsa
buster
postponed
sid
unimportant
trixie
unimportant
vte2.91
bullseye
no-dsa
bookworm
no-dsa
buster
postponed
sid
0.80.1-1
fixed
trixie
0.80.1-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
vte2.91
plucky
not-affected
oracular
not-affected
noble
Fixed 0.76.0-1ubuntu0.1
released
mantic
Fixed 0.74.0-2ubuntu0.1
released
jammy
Fixed 0.68.0-1ubuntu0.1
released
focal
Fixed 0.60.3-0ubuntu1~20.5
released
bionic
needs-triage
xenial
needs-triage
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2024/06/09/1
http://www.openwall.com/lists/oss-security/2024/06/09/2
https://gitlab.gnome.org/GNOME/vte/-/issues/2786
https://gitlab.gnome.org/GNOME/vte/-/tags/0.76.3
http://www.openwall.com/lists/oss-security/2024/06/09/1
http://www.openwall.com/lists/oss-security/2024/06/09/2
https://gitlab.gnome.org/GNOME/vte/-/issues/2786
https://gitlab.gnome.org/GNOME/vte/-/tags/0.76.3