Alerts This Week
Warning Icon 1 687
Alerts This Week
Warning Icon 1 687

Mageia 2021-0094 Moderate: xterm Denial Of Service Threat

mageia
Calendar Grey March 2, 2021
Dist Mageia Esm H88
Mageia 2021-0095 fixes a gnome-terminal vulnerability allowing remote execution of harmful commands via crafted inputs. Patches available for affected versions
xterm through Patch #365 allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted UTF-8 character sequence

Summary

xterm through Patch #365 allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted UTF-8 character sequence. (CVE-2021-27135).

References

- https://bugs.mageia.org/show_bug.cgi?id=28391

- https://ubuntu.com/security/notices/USN-4746-1

- https://lists.debian.org/debian-lts-announce/2021/02/msg00019.html

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/35LK2ZXEIJUOGOA7FV2TJL3L6LFJ4X5S/

- https://www.cve.org/CVERecord?id=CVE-2021-27135

Resolution

SRPMS

- 7/core/xterm-344-1.1.mga7

- 8/core/xterm-363-1.1.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 02 Mar 2021
URL: https://advisories.mageia.org/MGASA-2021-0094.html
Type: security
CVE: CVE-2021-27135

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here