USN-4746-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-4746-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4746-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-4746-1

Related

Published

2021-02-24T13:51:11.922769Z

Modified

2021-02-24T13:51:11.922769Z

Summary

xterm vulnerability

Details

Tavis Ormandy discovered that xterm incorrectly handled certain character sequences. A remote attacker could use this issue to cause xterm to crash, resulting in a denial of service, or possibly execute arbitrary code.

References

Affected packages

Ubuntu:16.04:LTS / xterm

Package

Name: xterm
Purl: pkg:deb/ubuntu/xterm?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

322-1ubuntu1.2

Affected versions

Other

318-2ubuntu1

318-2ubuntu2

322-1ubuntu1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "322-1ubuntu1.2",
            "binary_name": "xterm"
        },
        {
            "binary_version": "322-1ubuntu1.2",
            "binary_name": "xterm-dbgsym"
        }
    ]
}

Ubuntu:18.04:LTS / xterm

Package

Name: xterm
Purl: pkg:deb/ubuntu/xterm?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

330-1ubuntu2.2

Affected versions

Other

324-2ubuntu1

330-1ubuntu1

330-1ubuntu2

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "330-1ubuntu2.2",
            "binary_name": "xterm"
        },
        {
            "binary_version": "330-1ubuntu2.2",
            "binary_name": "xterm-dbgsym"
        }
    ]
}

Ubuntu:20.04:LTS / xterm

Package

Name: xterm
Purl: pkg:deb/ubuntu/xterm?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

353-1ubuntu1.20.04.2

Affected versions

Other

348-2ubuntu1

353-1ubuntu1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "353-1ubuntu1.20.04.2",
            "binary_name": "xterm"
        },
        {
            "binary_version": "353-1ubuntu1.20.04.2",
            "binary_name": "xterm-dbgsym"
        }
    ]
}