kitty vulnerabilities (Debian)
17 vulnerabilities.
-
kittyDebian Missing ownership check on the shared memory object named by the kitty askpass escape code 5.6 Medium -
kittyDebian Use after free in the kitty drag and drop protocol when a drag source item is aborted mid-transfer 4.6 Medium -
kittyDebian Missing authorization in the kitty drag and drop protocol allows a client to obtain dragged file contents without a drop 6.0 Medium -
kittyDebian Out-of-bounds write in the kitty text sizing protocol allows termination of the terminal process 6.8 Medium -
kittyDebian Improper link resolution in the kitty drag and drop protocol allows a client to create files outside the staging directory 4.6 Medium -
kittyDebian Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shell 9.3 Critical -
kittyDebian Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences 7.3 High -
kittyDebian Kitty vulnerable to command injection via unsanitized OSC 21 query reply 7.3 High -
kittyDebian Kitty has an arbitrary file overwrite via symlink following in `kitten dnd` remote drop staging 7.6 High -
kittyDebian Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol 5.0 Medium -
kittyDebian @kitty-edit DCS + --color=geninclude vulnerable to Unauthenticated in-process RCE 7.8 High -
kittyDebian Kitty has a shell command injection 7.4 High -
kittyDebian Kitty has a Heap Buffer Over-Read/Write via Integer Overflow in compose_rectangles Bounds Check 9.9 Critical -
kittyDebian Kitty has a Heap Buffer Overflow in its Graphics Protocol Handler 7.5 High -
kittyDebian open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local... 4.1 Medium -
kittyDebian In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can... 7.8 High -
kittyDebian The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to... 9.8 Critical