{"id":"CVE-2024-37535","aliases":["AZL-42631","AZL-43167","DEBIAN-CVE-2024-37535","EUVD-2024-36736","GHSA-wrc7-97qh-j6mh","MGASA-2024-0219","OESA-2024-1803","OESA-2024-1826","OESA-2024-1827","OESA-2024-1828","OESA-2024-1829","SUSE-SU-2024:2151-1","SUSE-SU-2024:2152-1","SUSE-SU-2024:2153-1","SUSE-SU-2024:2180-1","UBUNTU-CVE-2024-37535","USN-6833-1","openSUSE-SU-2024:14284-1"],"status":"published","title":"GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via...","description":"GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00238,"percentile":0.1487,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2024-06-09T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"vte291","fixed_in":["0.66.2-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"vte291","fixed_in":["0.74.2-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"vte2.91","fixed_in":["0.76.3-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"vte2.91","fixed_in":["0.76.3-6"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"vte","fixed_in":["0.72.1-1.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"vte291","fixed_in":["0.72.2-2.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"vte291","fixed_in":["0.62.3-2.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"vte291","fixed_in":["0.54.1-6.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"vte291","fixed_in":["0.62.3-2.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"vte291","fixed_in":["0.62.3-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"vte","fixed_in":["0.44.2-9.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"vte","fixed_in":["0.44.2-9.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"vte","fixed_in":["0.44.2-9.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"vte","fixed_in":["0.58.3-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"vte","fixed_in":["0.58.3-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"vte","fixed_in":["0.58.3-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"vte","fixed_in":["0.58.3-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"vte","fixed_in":["0.58.3-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"vte","fixed_in":["0.58.3-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"vte","fixed_in":["0.58.3-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"vte","fixed_in":["0.74.2-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"vte","fixed_in":["0.74.2-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"vte","fixed_in":["0.74.2-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"vte","fixed_in":["0.66.2-150400.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"vte","fixed_in":["0.66.2-150400.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"vte","fixed_in":["0.66.2-150400.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"vte","fixed_in":["0.66.2-150400.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"vte","fixed_in":["0.66.2-150400.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"vte","fixed_in":["0.66.2-150400.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"vte","fixed_in":["0.66.2-150400.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"vte","fixed_in":["0.66.2-150400.3.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"vte","fixed_in":["0.66.2-150400.3.5.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"vte2.91","fixed_in":["0.60.3-0ubuntu1~20.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"vte2.91","fixed_in":["0.68.0-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"vte2.91","fixed_in":["0.76.0-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"vte","fixed_in":["0.76.3-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"vte291","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.2-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"vte291","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.74.2-6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.28.2-6","1:0.28.2-6.1","1:0.28.2-6.1~exp1","1:0.28.2-6.1~exp2","1:0.28.2-7"]},{"source":"osv","ecosystem":"Debian:13","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.28.2-7"]},{"source":"osv","ecosystem":"Debian:14","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.28.2-7"]},{"source":"osv","ecosystem":"Debian:12","package":"vte2.91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.70.3-1","0.70.5-1","0.70.5-2","0.70.6-1","0.70.6-1~deb12u1","0.70.6-2","0.70.6-2~deb12u1","0.71.92-1","0.71.99-1","0.72.0-1","0.72.1-1","0.72.2-1","0.72.2-2","0.72.2-3","0.73.93-1","0.73.99-1","0.74.0-1","0.74.0-2","0.74.1-1","0.74.2-1","0.75.0-1","0.75.91-1","0.75.91-2","0.75.92-1","0.76.0-1","0.76.1-1","0.76.2-1","0.76.3-1","0.76.3-2","0.76.3-4","0.76.3-6","0.77.91-1","0.77.91-2","0.77.92-1","0.78.0-1","0.78.1-1","0.78.2-1","0.78.3-1","0.78.3-2","0.78.3-3","0.79.90-1","0.79.90-2","0.79.91-1","0.79.91-2","0.80.0-1","0.80.1-1","0.80.3-1","0.80.3-2","0.80.3-3","0.82.0-1","0.82.1-1","0.82.2-1","0.82.3-1","0.82.3-2","0.83.90-1","0.84.0-1","0.84.0-2","0.84.1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"vte2.91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.76.3-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"vte2.91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.76.3-6"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.72.1-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"vte291","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.72.2-2.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"vte291","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.3-2.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"vte291","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.54.1-6.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"vte291","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.3-2.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"vte291","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.3-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.2-9.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.2-9.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.2-9.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.58.3-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.58.3-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.58.3-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.58.3-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.58.3-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.58.3-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.58.3-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.74.2-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.74.2-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.74.2-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.2-150400.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.2-150400.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.2-150400.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.2-150400.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.2-150400.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.2-150400.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.2-150400.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.2-150400.3.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.2-150400.3.5.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"vte2.91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.40.2-1ubuntu3","0.42.1-1ubuntu1","0.42.1-1ubuntu2","0.42.1-2ubuntu1","0.42.4-1ubuntu1","0.42.4-1ubuntu2","0.42.5-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"vte2.91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.48.4-0ubuntu1","0.50.2-4ubuntu2","0.51.90-1ubuntu1","0.51.92-1ubuntu1","0.52.0-1ubuntu1","0.52.0-1ubuntu2","0.52.1-1ubuntu1","0.52.2-1ubuntu1~18.04.1","0.52.2-1ubuntu1~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vte2.91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.60.3-0ubuntu1~20.5"}]}],"versions":["0.58.2-1ubuntu2","0.59.91-0ubuntu1","0.59.91-0ubuntu2","0.60.0-2ubuntu2","0.60.1-1ubuntu1","0.60.3-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vte2.91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.68.0-1ubuntu0.1"}]}],"versions":["0.64.2-1ubuntu1","0.64.2-3","0.66.1-1","0.66.2-1","0.66.2-1build1","0.67.90-2","0.68.0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"vte2.91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.76.0-1ubuntu0.1"}]}],"versions":["0.74.0-2","0.74.1-1","0.74.1-1build1","0.74.2-1","0.75.91-2","0.75.92-1build1","0.75.92-1build2","0.76.0-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vte2.91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.60.3-0ubuntu1~20.5"}]}],"versions":["0.58.2-1ubuntu2","0.59.91-0ubuntu1","0.59.91-0ubuntu2","0.60.0-2ubuntu2","0.60.1-1ubuntu1","0.60.3-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vte2.91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.68.0-1ubuntu0.1"}]}],"versions":["0.64.2-1ubuntu1","0.64.2-3","0.66.1-1","0.66.2-1","0.66.2-1build1","0.67.90-2","0.68.0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"vte2.91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.76.0-1ubuntu0.1"}]}],"versions":["0.74.0-2","0.74.1-1","0.74.1-1build1","0.74.2-1","0.75.91-2","0.75.92-1build1","0.75.92-1build2","0.76.0-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"vte","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.76.3-3.1"}]}]}],"references":[{"url":"https://gitlab.gnome.org/GNOME/vte/-/issues/2786","tags":["x_transferred","report"]},{"url":"https://gitlab.gnome.org/GNOME/vte/-/tags/0.76.3","tags":["x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/06/09/1","tags":["mailing-list","x_transferred","article"]},{"url":"http://www.openwall.com/lists/oss-security/2024/06/09/2","tags":["mailing-list","x_transferred","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-37535","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-wrc7-97qh-j6mh"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/37xxx/CVE-2024-37535.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-37535","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0219.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33277","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/06/09/1","tags":["web","report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/06/09/2","tags":["web","report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1803","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1826","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1827","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1828","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1829","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242151-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1226134","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-37535","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242152-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242153-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242180-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-37535","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-37535","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6833-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-37535","description":"GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.","status":"published","published":"2024-06-09T00:00:00Z","modified":"2024-08-02T03:57:39.612Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:00.585327Z"}],"euvd":[{"id":"EUVD-2024-36736","description":"GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.","status":"published","published":"2024-06-09T00:00:00Z","modified":"2024-08-02T03:57:39Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:50:19.46851Z"}],"ghsa":[{"id":"GHSA-wrc7-97qh-j6mh","title":"GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via...","description":"GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.","status":"published","published":"2024-06-09T15:31:10Z","modified":"2024-07-03T18:44:21Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:57:37.066336Z"}],"nvd":[{"id":"CVE-2024-37535","description":"GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.","status":"published","published":"2024-06-09T15:16:00.94Z","modified":"2026-06-17T07:38:33.897Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:10:04.111836Z"}],"osv":[{"id":"CVE-2024-37535","description":"GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.","status":"published","published":"2024-06-09T00:00:00Z","modified":"2026-10-28T10:28:14.764360548Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:41.133403Z"},{"id":"DEBIAN-CVE-2024-37535","description":"GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.","status":"published","published":"2024-06-09T15:16:00.94Z","modified":"2026-11-02T12:02:36.917691754Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:42.835825Z"},{"id":"OESA-2024-1803","title":"vte291 security update","description":"VTE provides a virtual terminal widget for GTK applications.VTE is mainly used in gnome-terminal, but can also be used to embed a console/terminal in games, editors, IDEs, etc.\r\n\r\nSecurity Fix(es):\r\n\r\nGNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.(CVE-2024-37535)","status":"published","published":"2024-07-05T11:07:16Z","modified":"2026-08-18T01:18:28.141335371Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1826","title":"vte291 security update","description":"VTE provides a virtual terminal widget for GTK applications.VTE is mainly used in gnome-terminal, but can also be used to embed a console/terminal in games, editors, IDEs, etc.\r\n\r\nSecurity Fix(es):\r\n\r\nGNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.(CVE-2024-37535)","status":"published","published":"2024-07-12T11:07:17Z","modified":"2026-08-18T01:18:29.554298936Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1827","title":"vte291 security update","description":"VTE provides a virtual terminal widget for GTK applications.VTE is mainly used in gnome-terminal, but can also be used to embed a console/terminal in games, editors, IDEs, etc.\r\n\r\nSecurity Fix(es):\r\n\r\nGNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.(CVE-2024-37535)","status":"published","published":"2024-07-12T11:07:17Z","modified":"2026-08-18T01:18:29.442886591Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1828","title":"vte291 security update","description":"VTE provides a virtual terminal widget for GTK applications.VTE is mainly used in gnome-terminal, but can also be used to embed a console/terminal in games, editors, IDEs, etc.\r\n\r\nSecurity Fix(es):\r\n\r\nGNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.(CVE-2024-37535)","status":"published","published":"2024-07-12T11:07:17Z","modified":"2026-08-18T01:18:29.281614138Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1829","title":"vte291 security update","description":"VTE provides a virtual terminal widget for GTK applications.VTE is mainly used in gnome-terminal, but can also be used to embed a console/terminal in games, editors, IDEs, etc.\r\n\r\nSecurity Fix(es):\r\n\r\nGNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.(CVE-2024-37535)","status":"published","published":"2024-07-12T11:07:17Z","modified":"2026-08-18T01:18:29.499600232Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"UBUNTU-CVE-2024-37535","description":"GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.","status":"published","published":"2024-06-09T00:00:00Z","modified":"2026-04-22T14:56:26.878007Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:54.69008Z"},{"id":"AZL-42631","title":"CVE-2024-37535 affecting package vte291 for versions less than 0.66.2-3","description":"GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.","status":"published","published":"2024-06-09T15:16:00Z","modified":"2026-04-21T04:30:41.263517Z","updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"AZL-43167","title":"CVE-2024-37535 affecting package vte291 for versions less than 0.74.2-6","description":"GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.","status":"published","published":"2024-06-09T15:16:00Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:19.893001Z"},{"id":"MGASA-2024-0219","title":"Updated vte packages fix security vulnerability","description":"GNOME VTE before 0.76.3 allows an attacker to cause a denial of service\n(memory consumption) via a window resize escape sequence, a related\nissue to CVE-2000-0476. (CVE-2024-37535)\n","status":"published","published":"2024-06-14T17:30:25Z","modified":"2026-04-16T04:44:09.439864351Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:14284-1","title":"libvte-2_91-0-0.76.3-3.1 on GA media","description":"These are all security issues fixed in the libvte-2_91-0-0.76.3-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-08-22T00:00:00Z","modified":"2026-02-04T03:06:56.991499Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"SUSE-SU-2024:2151-1","title":"Security update for vte","description":"This update for vte fixes the following issues:\n\n- CVE-2024-37535: Fixed a bug that allowed an attacker to cause a denial of service (memory consumption) via a window resize escape. (bsc#1226134)\n","status":"published","published":"2024-06-21T14:14:10Z","modified":"2025-05-02T04:36:53.526213Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:2152-1","title":"Security update for vte","description":"This update for vte fixes the following issues:\n\n- CVE-2024-37535: Fixed a bug that allowed an attacker to cause a denial of service (memory consumption) via a window resize escape. (bsc#1226134)\n","status":"published","published":"2024-06-21T14:14:39Z","modified":"2026-02-04T03:48:05.283378Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:2153-1","title":"Security update for vte","description":"This update for vte fixes the following issues:\n\n- CVE-2024-37535: Fixed a bug that allowed an attacker to cause a denial of service (memory consumption) via a window resize escape. (bsc#1226134)\n","status":"published","published":"2024-06-21T14:14:53Z","modified":"2026-02-04T02:53:14.934449Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:2180-1","title":"Security update for vte","description":"This update for vte fixes the following issues:\n\n- CVE-2024-37535: Fixed a bug that allowed an attacker to cause a denial of service (memory consumption) via a window resize escape. (bsc#1226134)\n","status":"published","published":"2024-06-24T11:38:23Z","modified":"2026-02-04T04:19:30.508937Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"USN-6833-1","title":"vte2.91 vulnerability","description":"Siddharth Dushantha discovered that VTE incorrectly handled large window\nresize escape sequences. An attacker could possibly use this issue to\nconsume resources, leading to a denial of service.\n","status":"published","published":"2024-06-13T12:35:18Z","modified":"2026-04-27T17:16:48.251863Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}