CVE-2022-24130: Buffer Overflow
Published Jan 31, 2022
·Updated
xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text.
Affected Software
4 affected components
invisible-island xterm<=370
Debian Debian Linux=9.0
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Remediation
Patch Available
Event History
Jan 31, 2022
CVE Published
via MITRE·05:01 AM
Data Sourced
via MITRE·05:01 AM
Description
Data Sourced
via Red Hat·05:18 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-24130?
CVE-2022-24130 has a high severity due to the potential for buffer overflow exploitation.
2
How does CVE-2022-24130 affect xterm users?
CVE-2022-24130 can allow attackers to execute arbitrary code on systems using vulnerable versions of xterm with Sixel support enabled.
3
How do I fix CVE-2022-24130?
To fix CVE-2022-24130, update xterm to a version beyond Patch 370 or disable Sixel support.
4
What versions of xterm are affected by CVE-2022-24130?
CVE-2022-24130 affects all xterm versions up to and including Patch 370.
5
Which operating systems are impacted by CVE-2022-24130?
CVE-2022-24130 impacts xterm on Debian 9.0, Fedora 34, and Fedora 35.