CVE-2022-41138
In Zutty before 0.13, DECRQSS in text written to the terminal can achi ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 12 | zutty | 0.13.0.20220910.112547+dfsg1-1 |
| debian 13 | zutty | 0.13.0.20220910.112547+dfsg1-1 |
| debian 14 | zutty | 0.13.0.20220910.112547+dfsg1-1 |
| echo | zutty | 0.13.0.20220910.112547+dfsg1-1 |
| rapidfort ubuntu 20.04 | zutty | 0:0.13.0.20220910.112547+dfsg1-1 |
| rapidfort ubuntu 22.04 | zutty | 0:0.13.0.20220910.112547+dfsg1-1 |
| rapidfort ubuntu 24.04 | zutty | 0:0.13.0.20220910.112547+dfsg1-1 |
| ubuntu 22.04 | zutty | düzeltme belirtilmemiş |
Referanslar
- https://bugs.gentoo.org/868495
- https://github.com/tomszilagyi/zutty/commit/bde7458c60a7bafe08bbeaafbf861eb865edfa38
- https://github.com/tomszilagyi/zutty/commit/bde7458c60a7bafe08bbeaafbf861eb865edfa38%20%280.13%29
- https://github.com/tomszilagyi/zutty/compare/0.12...0.13
- https://security.gentoo.org/glsa/202209-25
- https://ubuntu.com/security/notices/USN-8078-1
- https://www.cve.org/CVERecord?id=CVE-2022-41138