CVE-2023-40359

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

References

Affected packages

Debian:11 / xterm

Package

Name: xterm
Purl: pkg:deb/debian/xterm?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

366-1

366-1+deb11u1

367-1

368-1

368-2

369-1

370-1

370-2

371-1

372-1

373-1

373-2

374-1

375-1

376-1

377-1

378-1

379-1

380-1

381-1

382-1

382-2

383-1

384-1

385-1

386-1

387-1

388-1

389-1

390-1

391-1

392-1

393-1

394-1

395-1

396-1

397-1

398-1

399-1

401-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:12 / xterm

Package

Name: xterm
Purl: pkg:deb/debian/xterm?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

379-1

380-1

381-1

382-1

382-2

383-1

384-1

385-1

386-1

387-1

388-1

389-1

390-1

391-1

392-1

393-1

394-1

395-1

396-1

397-1

398-1

399-1

401-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / xterm

Package

Name: xterm
Purl: pkg:deb/debian/xterm?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

382-2

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:14 / xterm

Package

Name: xterm
Purl: pkg:deb/debian/xterm?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

382-2

Ecosystem specific

{
    "urgency": "unimportant"
}