CVE-2022-41322: High severity Kitty Project Kitty vulnerability
Published Sep 23, 2022
·Updated
In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup.
Affected Software
3 affected components
Kitty Project Kitty<0.26.2
Fedoraproject Fedora=36
Fedoraproject Fedora=37
Remediation
Patch Available
Event History
Sep 23, 2022
CVE Published
via MITRE·04:55 AM
Data Sourced
via MITRE·04:55 AM
Description
Data Sourced
via NVD·05:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-41322?
CVE-2022-41322 has a critical severity level due to its potential for arbitrary code execution.
2
How do I fix CVE-2022-41322?
To fix CVE-2022-41322, upgrade Kitty to version 0.26.2 or later.
3
Can CVE-2022-41322 be exploited remotely?
CVE-2022-41322 requires user interaction to exploit, making it a client-side vulnerability.
4
What versions of Kitty are affected by CVE-2022-41322?
CVE-2022-41322 affects all versions of Kitty prior to 0.26.2.
5
Is this vulnerability present in Fedora distributions?
Yes, CVE-2022-41322 affects Fedora 36 and 37 when using vulnerable versions of Kitty.