Every CVE Search/ Get API key

CVE-2022-45063

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have...

9.8 CriticalFix available

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

6.56%Up 5.0 points since Nov 11, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

Record
CVE-2022-45063
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-77
Updated
2026-11-02
CVE List No score

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

Record
CVE-2022-45063
Updated
2026-11-02
EUVDEUVD-2022-47985 No score

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

Record
EUVD-2022-47985
Updated
2026-11-02
GitHub AdvisoriesGHSA-3cch-wj7f-8g8x 9.8

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have...

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

Record
GHSA-3cch-wj7f-8g8x
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-77
Updated
2026-11-02
OSVAZL-11429 9.8

CVE-2022-45063 affecting package xterm for versions less than 380-1

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

Record
AZL-11429
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

Record
CVE-2022-45063
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 20 moreShow less
OSVDEBIAN-CVE-2022-45063 9.8

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

Record
DEBIAN-CVE-2022-45063
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVOESA-2024-2236 9.8

xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals.

Security Fix(es):

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.(CVE-2022-45063)

Record
OESA-2024-2236
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2237 9.8

xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals.

Security Fix(es):

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.(CVE-2022-45063)

Record
OESA-2024-2237
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2238 9.8

xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals.

Security Fix(es):

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.(CVE-2022-45063)

Record
OESA-2024-2238
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2239 9.8

xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals.

Security Fix(es):

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.(CVE-2022-45063)

Record
OESA-2024-2239
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:7427 7.4

Red Hat Security Advisory: xterm security update

Record
RHSA-2025:7427
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:7427 7.4

Low: xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly.

Security Fix(es):

  • xterm: code execution via OSC 50 input sequences (CVE-2022-45063)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:7427
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-45063 9.8

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

Record
UBUNTU-CVE-2022-45063
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2025:7427 No score

Low: xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly.

Security Fix(es):

  • xterm: code execution via OSC 50 input sequences (CVE-2022-45063)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:7427
Updated
2026-11-02
OSVCLSA-2022-1669236294 No score

xterm: Fix of CVE-2022-45063

  • CVE-2022-45063: improve error recovery when setting a bitmap font for the VT100 window
  • Add NULL pointer checks in x_strcasecmp() and x_strncasecmp() to help with error recovery for a missing font
Record
CLSA-2022-1669236294
Updated
2026-11-02
OSVCLSA-2022-1669237302 No score

xterm: Fix of CVE-2022-45063

  • CVE-2022-45063: improve error recovery when setting a bitmap font for the VT100 window
  • Add NULL pointer checks in x_strcasecmp() and x_strncasecmp() to help with error recovery for a missing font
Record
CLSA-2022-1669237302
Updated
2026-11-02
OSVCLSA-2022-1669238963 No score

xterm: Fix of CVE-2022-45063

  • CVE-2022-45063: improve error recovery when setting a bitmap font for the VT100 window
  • Add NULL pointer checks in x_strcasecmp() and x_strncasecmp() to help with error recovery for a missing font
Record
CLSA-2022-1669238963
Updated
2026-11-02
OSVCLSA-2022-1669239895 No score

xterm: Fix of CVE-2022-45063

  • CVE-2022-45063: improve error recovery when setting a bitmap font for the VT100 window
  • Add NULL pointer checks in x_strcasecmp() and x_strncasecmp() to help with error recovery for a missing font
Record
CLSA-2022-1669239895
Updated
2026-11-02
OSVCLSA-2022-1669242003 No score

Fix CVE(s): CVE-2022-45063

  • SECURITY UPDATE: possible RCE when using OSC 50 sequence
    • debian/patches/CVE-2022-45063.patch: Improve error recovery when setting a bitmap font for the VT100 window, e.g., in case OSC 50 failed, restoring the most recent valid font so that a subsequent OSC 50 reports this correctly.
    • CVE-2022-45063
    • debian/patches/extra_safety_to_string_comparison_functions.patch: Add NULL pointer checks in x_strcasecmp() and x_strncasecmp() to help with error recovery for a missing font.
Record
CLSA-2022-1669242003
Updated
2026-11-02
OSVCLSA-2026-1777030519 No score

xterm: Fix of CVE-2022-45063

  • CVE-2022-45063: improve error recovery when setting a bitmap font for the VT100 window
  • add NULL pointer checks in x_strcasecmp() and x_strncasecmp() to help with error recovery for a missing font
Record
CLSA-2026-1777030519
Updated
2026-11-02
OSVMGASA-2022-0441 No score

Updated xterm packages fix security vulnerability

xterm before patch 375 can enable an RCE under certain conditions.

Record
MGASA-2022-0441
Updated
2026-11-02
OSVopenSUSE-SU-2024:12505-1 No score

xterm-375-2.1 on GA media

These are all security issues fixed in the xterm-375-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12505-1
Updated
2026-11-02
OSVSUSE-SU-2023:0173-1 No score

Security update for xterm

This update for xterm fixes the following issues:

  • CVE-2022-45063: Fixed an arbitrary code execution issue under configurations using vi and zsh (bsc#1205305).
Record
SUSE-SU-2023:0173-1
Updated
2026-11-02
OSVSUSE-SU-2023:0221-1 No score

Security update for xterm

This update for xterm fixes the following issues:

  • CVE-2022-45063: Fixed an arbitrary code execution issue under configurations using vi and zsh (bsc#1205305).
Record
SUSE-SU-2023:0221-1
Updated
2026-11-02
OSVSUSE-SU-2023:0582-1 No score

Security update for xterm

This update for xterm fixes the following issues:

  • CVE-2022-45063: Fixed command injection in ESC 50 fontoperation by disabling the change font functionality (bsc#1205305).
Record
SUSE-SU-2023:0582-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xterm
AlmaLinux:9
 before 366-10.el9_6
366-10.el9_6
xterm-resize
AlmaLinux:9
 before 366-10.el9_6
366-10.el9_6
xterm
Azure Linux:2
 before 380-1
380-1
xterm
TuxCare:CentOS:6
 before 253-2.el6.tuxcare.els2
253-2.el6.tuxcare.els2
xterm
TuxCare:CentOS:8.4
 before 331-1.el8_3.2.tuxcare.els1
331-1.el8_3.2.tuxcare.els1
xterm-resize
TuxCare:CentOS:8.4
 before 331-1.el8_3.2.tuxcare.els1
331-1.el8_3.2.tuxcare.els1
xterm
TuxCare:CentOS:8.5
 before 331-1.el8_3.2.tuxcare.els1
331-1.el8_3.2.tuxcare.els1
xterm-resize
TuxCare:CentOS:8.5
 before 331-1.el8_3.2.tuxcare.els1
331-1.el8_3.2.tuxcare.els1
xterm
TuxCare:OracleLinux:6
 before 253-2.el6.tuxcare.els2
253-2.el6.tuxcare.els2
xterm
TuxCare:Ubuntu:16.04
 before 322-1ubuntu1.2+tuxcare.els1
322-1ubuntu1.2+tuxcare.els1
Show 48 moreShow less
Affected packages
PackageAffectedFixed
xterm
TuxCare:CentOS-Stream:8
 before 331-2.el8.tuxcare.els1
331-2.el8.tuxcare.els1
xterm-resize
TuxCare:CentOS-Stream:8
 before 331-2.el8.tuxcare.els1
331-2.el8.tuxcare.els1
xterm
Debian:12
 before 375-1
375-1
xterm
Debian:13
 before 375-1
375-1
xterm
Debian:14
 before 375-1
375-1
xterm
Mageia:8
 before 376-1.mga8
376-1.mga8
xterm
openEuler:20.03-LTS-SP4
 before 334-7.oe2003sp4
334-7.oe2003sp4
xterm
openEuler:22.03-LTS-SP1
 before 363-6.oe2203sp1
363-6.oe2203sp1
xterm
openEuler:22.03-LTS-SP4
 before 363-6.oe2203sp4
363-6.oe2203sp4
xterm
openEuler:22.03-LTS-SP3
 before 363-6.oe2203sp3
363-6.oe2203sp3
xterm
Red Hat:enterprise_linux:9::appstream
 before 0:366-10.el9_6
0:366-10.el9_6
xterm-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:366-10.el9_6
0:366-10.el9_6
xterm-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:366-10.el9_6
0:366-10.el9_6
xterm-resize
Red Hat:enterprise_linux:9::appstream
 before 0:366-10.el9_6
0:366-10.el9_6
xterm-resize-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:366-10.el9_6
0:366-10.el9_6
xterm
Rocky Linux:9
 before 0:366-10.el9_6
0:366-10.el9_6
xterm
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 330-150000.4.6.1
330-150000.4.6.1
xterm
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 330-150000.4.6.1
330-150000.4.6.1
xterm
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 330-150000.4.6.1
330-150000.4.6.1
xterm
SUSE:Enterprise Storage 6
 before 330-150000.4.6.1
330-150000.4.6.1
xterm
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:Linux Enterprise Real Time 15 SP3
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:Manager Proxy 4.2
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:Manager Retail Branch Server 4.2
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:Manager Server 4.2
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:Enterprise Storage 7
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:Enterprise Storage 7.1
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
openSUSE:Leap 15.4
 before 330-150200.11.9.1
330-150200.11.9.1
xterm
SUSE:OpenStack Cloud 9
 before 308-5.9.1
308-5.9.1
xterm
SUSE:OpenStack Cloud Crowbar 9
 before 308-5.9.1
308-5.9.1
xterm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 308-5.9.1
308-5.9.1
xterm
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 308-5.9.1
308-5.9.1
xterm
SUSE:Linux Enterprise Server 12 SP4-ESPOS
 before 308-5.9.1
308-5.9.1
xterm
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 308-5.9.1
308-5.9.1
xterm
SUSE:Linux Enterprise Server 12 SP5
 before 308-5.9.1
308-5.9.1
xterm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 308-5.9.1
308-5.9.1
xterm
Ubuntu:16.04:LTS
 All versions, plus listed versions
318-2ubuntu1318-2ubuntu2322-1ubuntu1322-1ubuntu1.2
 None known
xterm
Ubuntu:18.04:LTS
 All versions, plus listed versions
324-2ubuntu1330-1ubuntu1330-1ubuntu2330-1ubuntu2.2
 None known
xterm
Ubuntu:20.04:LTS
 All versions, plus listed versions
348-2ubuntu1353-1ubuntu1353-1ubuntu1.20.04.2
 None known
xterm
Ubuntu:22.04:LTS
 All versions, plus listed versions
366-1ubuntu1369-1ubuntu1370-1ubuntu1370-2ubuntu1371-1ubuntu1372-1ubuntu1
 None known
xterm
openSUSE:Tumbleweed
 before 375-2.1
375-2.1

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-45063 is a critical vulnerability (CVSS 9.8) in Invisible-island Xterm, published November 10, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.56%, the 93rd percentile. Fixed in xterm 366-10.el9_6.

References

Show 40 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open