CVE-2024-37535: vte 0.76.3 leased with fix for CVE-2024-37535
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence a related issue to CVE-2000-0476.
Other sources
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vte2.91to a version that resolves this vulnerability.Fixed in 0.76.3-6 - Upgrade
Upgrade
debian/vte2.91to a version that resolves this vulnerability.Fixed in 0.80.1-1Fixed in 0.84.1-1 - Upgrade
Upgrade
GNOME VTEto a version that resolves this vulnerability.Fixed in 0.76.3
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37535?
CVE-2024-37535 is classified as a denial of service vulnerability that can lead to memory consumption.
How do I fix CVE-2024-37535?
To fix CVE-2024-37535, upgrade GNOME VTE to version 0.76.3 or later.
Which versions of GNOME VTE are affected by CVE-2024-37535?
GNOME VTE versions prior to 0.76.3 are affected by CVE-2024-37535.
What kind of attack does CVE-2024-37535 enable?
CVE-2024-37535 allows an attacker to cause a denial of service through a window resize escape sequence.
Is CVE-2024-37535 related to any other vulnerabilities?
CVE-2024-37535 is related to CVE-2000-0476 as both involve issues that can lead to denial of service.