p PatchFirst

CVE-2022-45063

CVE-2022-45063

This page contains facts from public vulnerability sources. Check the original advisory before updating.

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

CVSS 9.8 · Critical · EPSS 5.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • xterm Debian:12

    Affected ranges
    • ECOSYSTEM: < 375-1

    Update to 375-1

  • xterm Debian:13

    Affected ranges
    • ECOSYSTEM: < 375-1

    Update to 375-1

  • xterm Debian:14

    Affected ranges
    • ECOSYSTEM: < 375-1

    Update to 375-1

  • xterm Ubuntu:16.04:LTS

    Versions
    • 318-2ubuntu1
    • 318-2ubuntu2
    • 322-1ubuntu1
    • 322-1ubuntu1.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xterm Ubuntu:18.04:LTS

    Versions
    • 324-2ubuntu1
    • 330-1ubuntu1
    • 330-1ubuntu2
    • 330-1ubuntu2.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xterm Ubuntu:20.04:LTS

    Versions
    • 348-2ubuntu1
    • 353-1ubuntu1
    • 353-1ubuntu1.20.04.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xterm Ubuntu:22.04:LTS

    Versions
    • 366-1ubuntu1
    • 369-1ubuntu1
    • 370-1ubuntu1
    • 370-2ubuntu1
    • 371-1ubuntu1
    • 372-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →