{"id":"CVE-2022-24130","aliases":["ALPINE-CVE-2022-24130","ALSA-2025:14075","AZL-8456","DEBIAN-CVE-2022-24130","DLA-2913-1","EUVD-2022-29041","GHSA-5v7p-cf4c-24jq","MGASA-2022-0051","OESA-2022-1563","OESA-2022-2072","RHSA-2025:14075","RLSA-2025:14075","SUSE-SU-2022:3952-1","SUSE-SU-2022:3953-1","UBUNTU-CVE-2022-24130","openSUSE-SU-2024:12733-1"],"status":"published","title":"xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer...","description":"xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0168,"percentile":0.77131,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2022-01-31T05:01:06Z","modified":"2026-11-03T07:31:15Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"xterm","fixed_in":["371-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"xterm","fixed_in":["371-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"xterm","fixed_in":["371-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"xterm","fixed_in":["371-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"xterm","fixed_in":["371-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"xterm","fixed_in":["371-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"xterm","fixed_in":["371-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"xterm","fixed_in":["371-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"xterm","fixed_in":["371-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"xterm","fixed_in":["371-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"xterm","fixed_in":["366-12.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"xterm-resize","fixed_in":["366-12.el9_6"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"xterm","fixed_in":["372-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"xterm","fixed_in":["370-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xterm","fixed_in":["370-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xterm","fixed_in":["370-2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"xterm","fixed_in":["327-2+deb9u2"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"xterm","fixed_in":["363-1.2.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"xterm","fixed_in":["334-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"xterm","fixed_in":["334-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"xterm","fixed_in":["334-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"xterm","fixed_in":["363-4.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xterm","fixed_in":["0:366-12.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xterm-debuginfo","fixed_in":["0:366-12.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xterm-debugsource","fixed_in":["0:366-12.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xterm-resize","fixed_in":["0:366-12.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xterm-resize-debuginfo","fixed_in":["0:366-12.el9_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"xterm","fixed_in":["0:366-12.el9_6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"xterm","fixed_in":["308-5.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"xterm","fixed_in":["308-5.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"xterm","fixed_in":["330-150200.11.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"xterm","fixed_in":["330-150200.11.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"xterm","fixed_in":["330-150200.11.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"xterm","fixed_in":["330-150200.11.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"mlterm","fixed_in":["3.9.2-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"371-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"371-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"371-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"371-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"371-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"371-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"371-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"371-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"371-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"371-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"366-12.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xterm-resize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"366-12.el9_6"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"372-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"370-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"370-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"370-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"327-2+deb9u2"}]}],"versions":["327-2","327-2+deb9u1"]},{"source":"osv","ecosystem":"Mageia:8","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"363-1.2.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"334-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"334-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"334-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"363-4.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:366-12.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xterm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:366-12.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xterm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:366-12.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xterm-resize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:366-12.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xterm-resize-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:366-12.el9_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:366-12.el9_6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"308-5.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"308-5.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"330-150200.11.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"330-150200.11.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"330-150200.11.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"330-150200.11.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["318-2ubuntu1","318-2ubuntu2","322-1ubuntu1","322-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["324-2ubuntu1","330-1ubuntu1","330-1ubuntu2","330-1ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["348-2ubuntu1","353-1ubuntu1","353-1ubuntu1.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["366-1ubuntu1","369-1ubuntu1","370-1ubuntu1","370-2ubuntu1","371-1ubuntu1","372-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["384-1ubuntu1","388-1ubuntu1","389-1ubuntu1","390-1ubuntu1","390-1ubuntu2","390-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["397-1ubuntu1","398-1ubuntu1","402-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["407-1ubuntu1","409-1ubuntu1","410-1ubuntu1","411-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["402-1ubuntu1","403-1ubuntu1","404-1ubuntu1","405-1ubuntu1","406-1ubuntu1","407-1ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mlterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-3.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"invisible-island","product":"xterm"}],"references":[{"url":"https://twitter.com/nickblack/status/1487731459398025216","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/30/2","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence","report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/30/3","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence","report"]},{"url":"https://invisible-island.net/xterm/xterm.log.html","tags":["x_refsource_MISC","x_transferred","Patch","Release Notes","Vendor Advisory","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00007.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BP5Y4O7WBNLV24D22E6LE7RQFYOUVD2U/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4CWYYEBT6AJRJBBQU2KLUOQDHRM7WAV/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202208-22","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24130","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BP5Y4O7WBNLV24D22E6LE7RQFYOUVD2U/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T4CWYYEBT6AJRJBBQU2KLUOQDHRM7WAV/"},{"url":"https://github.com/advisories/GHSA-5v7p-cf4c-24jq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-24130","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:14075","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24130","tags":["report"]},{"url":"https://bugzilla.redhat.com/2048676","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-14075.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-24130","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0051.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29975","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/31/1","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1563","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2072","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048676","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14075.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24130","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2025:14075","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223952-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1195387","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24130","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223953-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-24130","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-24130","description":"xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.","status":"published","published":"2022-01-31T05:01:06Z","modified":"2024-08-03T03:59:23.628Z","updated_at":"2026-11-02T14:34:34.576287Z"}],"euvd":[{"id":"EUVD-2022-29041","description":"xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.","status":"published","published":"2022-01-31T05:01:06Z","modified":"2024-08-03T03:59:23Z","updated_at":"2026-11-03T03:25:50.168269Z"}],"ghsa":[{"id":"GHSA-5v7p-cf4c-24jq","title":"xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer...","description":"xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.","status":"published","published":"2022-02-08T00:00:47Z","modified":"2023-01-27T05:00:56Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:41:46.892672Z"}],"nvd":[{"id":"CVE-2022-24130","description":"xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.","status":"published","published":"2022-01-31T05:15:08.033Z","modified":"2026-06-17T04:31:21.417Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:11.52734Z"}],"osv":[{"id":"ALPINE-CVE-2022-24130","description":"xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.","status":"published","published":"2022-01-31T05:15:08.033Z","modified":"2026-11-03T07:31:15.374039952Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"AZL-8456","title":"CVE-2022-24130 affecting package xterm for versions less than 372-1","description":"xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.","status":"published","published":"2022-01-31T05:15:08Z","modified":"2026-04-21T04:34:50.002479Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:10.335477Z"},{"id":"CVE-2022-24130","description":"xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.","status":"published","published":"2022-01-31T05:15:08.033Z","modified":"2026-04-16T04:40:31.812981137Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:24.428403Z"},{"id":"DEBIAN-CVE-2022-24130","description":"xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.","status":"published","published":"2022-01-31T05:15:08.033Z","modified":"2026-11-03T08:01:05.27581377Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"OESA-2022-1563","title":"xterm security update","description":"It is a terminal emulator for the X Window System.\r\n\r\nSecurity Fix(es):\r\n\r\nxterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.(CVE-2022-24130)","status":"published","published":"2022-03-07T11:04:50Z","modified":"2026-08-18T01:16:27.607709742Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-2072","title":"xterm security update","description":"The xterm program is a terminal emulator for the X Window System.It provides DEC VT102 and Tektronix 4014 compatible terminals.\r\n\r\nSecurity Fix(es):\r\n\r\nxterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.(CVE-2022-24130)","status":"published","published":"2022-11-11T11:05:23Z","modified":"2026-08-18T01:16:56.004072102Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2025:14075","title":"Red Hat Security Advisory: xterm security update","status":"published","published":"2025-08-19T10:03:03Z","modified":"2026-03-18T10:48:23Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RLSA-2025:14075","title":"Moderate: xterm security update","description":"The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly. \n\nSecurity Fix(es):\n\n* xterm: Buffer overflow in set_sixel in graphics_sixel.c (CVE-2022-24130)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:40:15.168187Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2022-24130","description":"xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.","status":"published","published":"2022-01-31T05:15:00Z","modified":"2026-10-17T12:56:21.367147801Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"ALSA-2025:14075","title":"Moderate: xterm security update","description":"The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly.   \n\nSecurity Fix(es):  \n\n  * xterm: Buffer overflow in set_sixel in graphics_sixel.c (CVE-2022-24130)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-08-19T00:00:00Z","modified":"2026-10-29T11:32:27.664444978Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"DLA-2913-1","title":"xterm - security update","status":"published","published":"2022-02-07T00:00:00Z","modified":"2026-03-09T01:23:03.448651Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2022-0051","title":"Updated xterm packages fix security vulnerability","description":"xterm through Patch 370, when Sixel support is enabled, allows attackers\nto trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted\ntext. (CVE-2022-24130)\n","status":"published","published":"2022-02-05T20:23:13Z","modified":"2026-04-16T04:41:37.886830904Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12733-1","title":"mlterm-3.9.2-3.1 on GA media","description":"These are all security issues fixed in the mlterm-3.9.2-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:08:27.726522Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2022:3952-1","title":"Security update for xterm","description":"This update for xterm fixes the following issues:\n\n- CVE-2022-24130: Fixed buffer overflow in set_sixel when Sixel support is enabled. (bsc#1195387)\n","status":"published","published":"2022-11-11T10:41:16Z","modified":"2026-02-04T04:23:58.434454Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3953-1","title":"Security update for xterm","description":"This update for xterm fixes the following issues:\n\n  - CVE-2022-24130: Fixed buffer overflow in set_sixel when Sixel support is enabled (bsc#1195387).\n","status":"published","published":"2022-11-11T10:41:37Z","modified":"2025-05-02T04:32:50.478184Z","updated_at":"2026-11-02T15:53:51.440565Z"}]}}