PT-2022-6818 · Xterm+9 · Xterm+9
David Leadbeater
·
Published
2022-10-23
·
Updated
2026-04-08
·
CVE-2022-45063
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
xterm versions prior to 375
Description
The issue is related to the lack of input validation in the xterm terminal emulator, which can be exploited by a remote attacker to gain access to confidential data, compromise its integrity, and cause a denial of service. The vulnerability can be exploited via font operations, for example, because an OSC 50 response may contain Ctrl-g, leading to command execution within the vi line-editing mode of Zsh. It is noted that font operations are not allowed in the xterm default configurations of some Linux distributions.
Recommendations
For xterm versions prior to 375, update to version 375 or later to resolve the issue. As a temporary workaround, consider disabling font operations until a patch is available. Restrict access to the
vi line-editing mode of Zsh to minimize the risk of exploitation. Avoid using the Ctrl-g character in OSC 50 responses until the issue is resolved.Exploit
Fix
RCE
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Debian
Red Hat
Red Os
Rocky Linux
Suse
Zsh
Xterm