kitty vulnerabilities (Ubuntu)
17 vulnerabilities.
-
kittyUbuntu Missing ownership check on the shared memory object named by the kitty askpass escape code 5.6 Medium -
kittyUbuntu Use after free in the kitty drag and drop protocol when a drag source item is aborted mid-transfer 4.6 Medium -
kittyUbuntu Missing authorization in the kitty drag and drop protocol allows a client to obtain dragged file contents without a drop 6.0 Medium -
kittyUbuntu Out-of-bounds write in the kitty text sizing protocol allows termination of the terminal process 6.8 Medium -
kittyUbuntu Improper link resolution in the kitty drag and drop protocol allows a client to create files outside the staging directory 4.6 Medium -
kittyUbuntu Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shell 9.3 Critical -
kittyUbuntu Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences 7.3 High -
kittyUbuntu Kitty vulnerable to command injection via unsanitized OSC 21 query reply 7.3 High -
kittyUbuntu Kitty has an arbitrary file overwrite via symlink following in `kitten dnd` remote drop staging 7.6 High -
kittyUbuntu Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol 5.0 Medium -
kittyUbuntu @kitty-edit DCS + --color=geninclude vulnerable to Unauthenticated in-process RCE 7.8 High -
kittyUbuntu Kitty has a shell command injection 7.4 High -
kittyUbuntu Kitty has a Heap Buffer Over-Read/Write via Integer Overflow in compose_rectangles Bounds Check 9.9 Critical -
kittyUbuntu Kitty has a Heap Buffer Overflow in its Graphics Protocol Handler 7.5 High -
kittyUbuntu open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local... 4.1 Medium -
kittyUbuntu In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can... 7.8 High -
kittyUbuntu The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to... 9.8 Critical